id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
6519	"admin: ""Can change user"" permission allows to change all others even w/o ""Can change permissions"""	raik.gruenberg@…	thauber	"Giving a user the ""Can change user"" permission in the admin interface, automatically enables this user to also give him/herself or anyone else any other permission, including superuser status. That's unexpected because there is a separate ""Can change permission"" flag, which seems to be ignored.

Specifically, I wanted to allow users to change their own details, or at least password...

Django revision: 6914

THX
Raik"	New feature	closed	contrib.admin	newforms-admin	Normal	invalid	permissions nfa-someday		Design decision needed	0	0	0	0	0	0