User settings permission

There should be a permission that allows the user to change his information (like email and password) - right now either the user has no permission to do it or it has full access to user/group management.