...
Furthermore, a user is allowed to change his/her own password, Admin can always change any user’s password.
A user can have a list of roles, e.g a user can be both an admin and a designer.
The system is usually provided with only one user, admin, with a default password.
...