I have a User Authentication module in my project, that is managing all user information and is regulated with certain granular access rights as
Change User and
Delete User. These are obviously meant for administration uses and a regular user will not have those permission sign to.
Never the less, as a regular user I want to edit my own user details of course. With a regular user not having the
Change user permission, he could exactly not do that. Of could make an exceptional condition in the back end if a user wants to edit himself. But somehow I've got the feeling, that there is a cleaner way to do this.
What would be the best way for this dilemma?