Security Hole, Bad DB?

On Sunday night I used the translator to upgrade my old634.mdb to the new 7 version.

My forum is now locked because if a user, in the lowest group, logs into the site, he can click on anyones profile, then he sees the EDIT PROFILE button and can then edit that persons profile.

I've duplicated the problem over and over again.  No matter what my user access group is I can do it.  Obviously Admin's and Moderator's should be able to but EVERYONE can do it.  Potentially the problem is not that great for me because it's just a profile, BUT, the person can then change their own access level like if they were admins, giving themself access to our private forums.

Is this 7 problem or database problem?

Through all of this, this is the greatest and most feature rich forum out there.  Whether it be in PHP, ASP, whatever, this forum is great.  I would pay for the non-boxed version if I had too.  I looked into all the ASP boards out there and I even installed a couple for testing but non compared to this one.  The admin (control panel) is the most easiest to use, great tool.

Thank you guys for your tremendous work and time that you have put into this amazing tool.

If the Database "Migrator" (downloadable from WWF) had been used, Users with Moderator status on 6.34 would also have same status on v7 - no more, no less. There is no way that all Users would have been set to Moderator unless either old or new DB was already corrupt, in which case anything could have happened.

If in doubt, run a Compact / Repair on both old and new DBs before running the Migrator App.

Hope this helps
Nigel