Trying to access the debug user/group reports fails unless you have the site in debug mode. Though we only show the links to these pages when debug's enabled, there's no reason to block access to the views completely.
Testing Instructions
With debug disabled, direct access administrator/index.php?option=com_users&view=debuguser&user_id=<user_id> and administrator/index.php?option=com_users&view=debuggroup&group_id=<group_id> will fail if you don't pass the ACL check or if the site is not in debug mode. After the patch, only the ACL check will block this view.
I have tested this item✅ successfully on
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11975.