I changed that so they have permission. But Im still getting reports from users who have 0 posts and get no permission error when they click the link.
I dont know if it matters but I do have @Xon 's User Essentials installed, which also has account disabling features.