code: func (a *AuthWithRoles) currentUserAction(username string) error {
  	if username == a.user.GetName() {
  		return nil
  	}
  	return a.checker.CheckAccessToRule(&services.Context{User: a.user},
  		defaults.Namespace, services.KindUser, services.VerbCreate, false)
  }
docs: // currentUserAction is a special checker that allows certain actions for users
  // even if they are not admins, e.g. update their own passwords,
  // or generate certificates, otherwise it will require admin privileges