Just discovered that any NW users with only basic trustee rights to their home directory seem to be granted full admin rights if they choose to login via Remote Manager using port 8008.
Any user has the ability to delete or rename whole directories even on SYS !

What's all that about ?

Checked NW65SP8 servers with the same results
eDirectory version 8.8 SP4 SMP
NDS version 20217.06
Seems to be the same with SP7 servers too

Surely this can't be right
I had up to now assumed that rights would be restricted to those trustee rights granted via ConsoleOne, so that only admin would have everything and subordinate administrators would be restricted to specific areas

Anyone know how to fix this quickly please as this seems a very vulnerable hole which needs to be plugged