I wonder if this is normal SugarCRM behavior, or do we have more work to do. It would be easy to change, but a little more difficult to change while applying the ACL rules.