Ensure perms for saving a profile is self

register doesnt use this endpoint if you're concerned

Author: Wardormeur

config/perm/profiles.js

@@ -4,6 +4,16 @@ module.exports = function(){
   return {
       'create': [{
         role: 'basic-user',
+        customValidator: [{
+          role: 'cd-users',
+          cmd: 'is_self'
+        }]
+      }, {
+        role: 'basic-user',
+        customValidator: [{
+          role: 'cd-users',
+          cmd: 'is_parent_of'
+        }]
       }],
       'user_profile_data': [{
         role: 'none',