I am coming across a rather strange bug whilst using the MUC aspect of Openfire. For some reason users with the affiliation of admin or owner (moderators) are able to change the affiliations of other admins and owners in the same room. This means that moderators are able to demod/ban anyone including themselves! My current solution is to use a packet filter to stop this from happening but surely it should not be allowed by default?
I am using Openfire 3.9.1 running on Mac OS X 10.9.1