Both empty arguments and illegal parameters, can modify the existing configuration to none permissions.
It should be modified to:
1.empty parameter modify the existing configuration to none permissions.
2.illegal parameter return an error.
test fix:
before: subuser create or modify, illegal access parameter can modify the existing configuration.
after changes, do the same procedure, can check for illegal access parameters.