User can change their profile bypassing all settings if they have an avatar

Greetings. Running Openfire 3.7.1 with Spark 2.6.3

In “Client management” i’ve set “Allow users to change their profiles and avatars” to disabled.

Room has “Allow Occupants to change nicknames” set to disable.

Still if a user has an avatar he can right-click it and access “Profile information” and change his nickname in MUC.

Major failure or am I not getting something?

Ok, there was an old ticket filed against Openfire and Client Control plugin related to user still able to edit profile even if it was disabled in Client Control plugin. But after taking another look on this i think it is purely Spark bug and i have filed it as SPARK-1516.

But i wasn’t able to reproduce nickname change in a MUC room if nickname changes are disabled. At least with the current 3.8.1 nightly build. Can you provide exact steps how you achieve that?