I appreciate the pointer Bernd, as I encountered the same scenario on the 2.17->2.18 upgrade. Every user, including the admin, had permission level "10" in the admin_permission table. I changed it to 20 for the appropriate users and regained access.
Charles