Better fix.

modoboa/core/models.py

@@ -259,7 +259,7 @@ class User(AbstractUser):
         if role == "SuperAdmins":
             self.is_superuser = True
         else:
-            if self.is_superuser or self.has_perm("core.add_user"):
+            if self.is_superuser or role == "SimpleUsers":
                 ObjectAccess.objects.filter(user=self).delete()
             self.is_superuser = False
             try:

modoboa/limits/tests/test_user_limits.py

@@ -31,8 +31,8 @@ class PermissionsTestCase(lib_tests.ModoTestCase):
         }
         self.ajax_post(reverse("admin:account_add"), values)
         account = User.objects.get(username="reseller@test.com")
-        self.client.logout()
-        self.client.login(username="admin@test.com", password="toto")
+        admin = User.objects.get(username="admin@test.com")
+        self.client.force_login(admin)
         resp = self.ajax_post(
             reverse("admin:account_delete", args=[account.id]),
             {}, status=403