Index: openacs-4/packages/acs-subsite/www/members/index.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-subsite/www/members/index.tcl,v
diff -u -N -r1.24 -r1.25
--- openacs-4/packages/acs-subsite/www/members/index.tcl	23 Sep 2018 16:52:56 -0000	1.24
+++ openacs-4/packages/acs-subsite/www/members/index.tcl	23 Sep 2018 16:56:09 -0000	1.25
@@ -58,6 +58,14 @@
 set user_id [ad_conn user_id]
 set admin_p [permission::permission_p -party_id $user_id -object_id $group_id -privilege "admin"]
 
+if {!$admin_p && $page_size > 50} {
+    #
+    # Do not allow end-user to get full list of all members (which
+    # might be thousands). Fall back to default.
+    #
+    set page_size 50
+}
+
 set approved_member_p [group::party_member_p -group_id $group_id -party_id $user_id]
 set show_member_list_p [expr {
                               $show_member_list_to == 0