edit
/etc/pam.d/su
remark the following line
auth required pam_wheel.so use_uid
It requires users to be in the wheel group to be able to switch user.
User switching as non-root works again when this pam module is disabled for su.
