id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
35959	"Admin ""Change password"" Button Visible with Only ""Can view user"" Permission"	Dev Namdev	Sarah Boyce	"There seems to be a bug (or design oversight) in the Django admin panel where the ""**Change password**"" button is visible to users who only have the **Can view user permission**. According to Django's permission model, a user who can only view users should not have access to modifying user details, including changing the password.

Steps to reproduce:

1. Create a superuser and a test user.
2. Grant the test user only the Can view user permission.
3. Log in to the admin panel as the test user.
4. Navigate to the user change page for any user.
5. Observe that the ""Change password"" button is visible despite the user having no permission to change user details.
"	Bug	closed	contrib.admin	5.1	Normal	fixed	Permissions, Admin Interface, Change Password, View User, Permission Bug	Dev Namdev	Ready for checkin	1	0	0	0	0	1