I looked into the problem a little bit and found out that the current distinction between rights is needed for the admin-changes-user-password functionality.
But it seems as if this functionality has not fully been implemented (especially in the adp part). The whole page logic (for a few pages) does not seem to fit the scenario that one user changes another users password.
I have corrected the situation as far as i could. Now the user can change her password and the admin can change it for her as well. But there are some pages that have to be changed
- password-update.tcl
- password-update.adp
- password-update-2.tcl
I will try to create a patch and upload it to the bug report i filed. (https://openacs.org/sdm/one-baf.tcl?baf_id=1491)
