Hi folks

I am really confused with USER content type.

Menu Structure:

• Member
  
  • Profile
    • Form
• Admin
  • Profiles
    • Form

So.... for the Member/Profile/Form part....

1. I want a user to be able to edit their user data i.e. phone number etc...
2. I want ONLY admins to be able edit any user data i.e. blocked etc...
3. I do NOT want members to be able to alter any other user.

• Currently, only admins create users profiles.
• So "created_by" is always ADMIN
• So "edit_own" does not come in to effect here

Currently, if a (devious) member changes the id in the url, they can manipulate another users data i.e 

• "/profile/profile-form/form/user?id=441&return=..."

I am struggling to have it so that the user can NOT edit any other users data.

If I use SEBLOD Break, it just breaks no matter what I do i.e.

Field 1

• Name: user_id

Field 2

• Name: seblod_break_user
• Restriction: Fields
  • Field Name / Value(s): user_id
  • is Equal/In: User -> id
• If I change from Value to Form, or Invert -> Yes to Invert -> No, always  same result: BREAK.

So after all that, how do you have a user form where the user can only edit where the user_id matches THEIR id?