zen-cms/Zen-Core — Issue #41: Permissions for editing users
Author: YorickPeterse
Created: 2011-12-11 21:11:31+00:00
State: open
Labels: Enhancement

Users can only edit accounts when they have the "edit_user" permission. However,
being allowed to edit users means a user can edit all users that exist. This is
a problem as this permission is also required for users to edit their own
profile (name, password, etc).

To cut a long story short, users should be able to always edit their own details
regardless of their permissions.