let users change their password

  Hi,

how can I let users change their own password but noone else's ?

I could restrict this within our client-app but then I'm skrewed when
some smarty connects directly with psql.