I have created a custom role. It automatically receives any permissions given to authenticated users. Is there a way to prevent this from happening?
What I would like to achieve is:
Authenticated user: has permission to edit email address and password
Custom role: doesn't have permission to edit email address and password
Currently on my site, users all have the permission "Authenticated user". I would like some new users to have the "Custom role".
The answer to this question: How can i create a user without role authenticated user role suggests to instead edit the "Authenticated user role" and swap the "Custom role" to being the one with more permissions.
So instead I would have to have:
"Authenticated user": doesn't have permission to edit email address and password.
"Custom role": has permission to edit email address and password.
BUT if I do this then all of the current users will no longer be able to edit their email address and password, as they will still be "Authenticated Users", and updating each user to the new role would require entering their password (which I can't do).
Note: I would still like all users to be able to edit other fields such as "First Name".
