Attached is 3 purpose patch:
1. There is bug (1292641) when a user tries to update
their own profile (even if they are allowed because the
login name parameter is not passed.
2. A user shouldn't even be given the opportunity to
change their login name if they are not an admin or
allowed to manage users - so show it as read only
3. I created a new permission that allows a user to
change only thier password - but not the rest of their
profile.
This patch is against version 0.53.2
patch and enhancement