Auth permission

As admin I give group permission and assign users.

I want one of the groups only be able to change their profile settings (such as password). Therefore I assign group permission of Auth Profile, but it doesn't work without Auth User permission.
If I enable Auth User, then a member of the group is not only able to change their permissions but actually see all the website users (even outside his/her group) even being a simple non-admin user disable admin user login!

Hello,

You can check the following topic:

https://akaunting.com/forum/discussion/general/permission-settings-for-profile-only

Regards

I have that problem as well: I cannot seem to give users the ability to change their own passwords without also giving them the ability to change their own permissions and make themselves admins... when I allow Update Auth Profile, they can edit their own permissions

FIrget it, I apparently had some extra permission there