We are using ADselfService Plus, and have discovered that users can edit disabled fields such as 'job title', which should not be editable by the user. We have found this problem in version  4.5,  build number : 4544.

Steps to reproduce:

1. Login to ADselfService Plus profile edit profile page.

2. Right click on a disabled field and click "Inspect element".

3. A panel will open at the bottom; right click on the highlighted line of text, and click "Edit as HTML".

4. Remove the segment "disabled='disabled' ".

5. Click back in the text box and you can now edit it.

6. Press the "Update" button when finished.

The values are then saved in the system. 

Is there a fix for this issue? Any information would be appreciated.