User without authorization could still maintain Debtors

Using the Advanced Search, it turned out that a user who was not authorized to do so could still perform maintenance on the module. We have solved this problem.