Password

Have a look at the attachment and the included screen shots (in all cases, the password is the same as the user id)
Screen1.
The 'add' button is available to the 'supervisor' role - for any other role, it is disabled.
Screen2.
The 'set up' button is available to the 'supervisor' role - for another other role, a message is displayed.
Screen3
The 'combobox' options are all available to the 'supervisor' role - for the 'user' role, the options are limited to 'Norway'
Screen4
The 'save' button is available to the 'supervisor' role - for any other role, it is invisible.
Screen5
Only the 'admin' user is currently allowed to add/change/delete users - all other users can only change their passwords.
I suspect that not many people use 'role based authorisations' which is a shame because it is extremely useful and knowing how to use it can help in designing your application.
Derek.

Have a look at the screen shots in the attachment.
If a user has forgotten the password, it needs to be reset by an administrator.
Screen1.
Select 'Users';  only a user who has been created as an administrator has access to this option.
Screen2
Select the User who has forgotten their password and click 'edit'.
Screen3.
Click on the 'Change Password' button.
Screen4.
The password edit field is now empty and waiting for the administrator to set up a new password.
The administrator notifies the User that the password has been reset and should be advised to change it to something that only they know.
Derek.