su to root

On my new SuSE 7.1 any user can su to root if they know the root password. I thought only members of group root could su to root, but now anybody can. Is this a bug? Egan