Prevent blocked users from changing user rights through the API