Finer grained user profile control

[siddhesh]

Currently to delegate user profile administration, one needs to give auth|user|Can change user as well as auth|user profile|Can change user profile. It would be nice to delegate user profile administration to someone without giving them rights to change anything else about the users but it doesn't look like there's a way to do that.

[stephenfin]

We don't have any custom permissions right now, so this would be a big ask. Would it make sense to allow users to change certain information about themselves to avoid the need for admin interaction? I'm thinking name, primarily (along with the ability to delete oneself).

[siddhesh]

That would be nice, but what I was really looking for was to delegate administration of subprojects to specific staff members. For patchwork.sourceware.org for example, I could then bless some gdb administrators to add users to the gdb project and not have them block on me.

Currently to allow them to do that, I need to give them permissions to modify users too, which requires me to also give them user modification permission, which in turn allows them to make other users staff members, or even superusers.