User X can update User Y credentials #3
Description
There is a very basic problem that a user X can change the discoverable variable of User Y, a proper check needs to be added to authenticate the user before allowing him to do any view level operation.