Groups allows users to cancel account.

Problem/Motivation

Trying to wrap my head around where this could be defined but still no luck.

I have a group with a single group role. If a user is in that role they are allowed to cancel their account (go to user edit form and there is a cancel button). If i remove them from that role; they are not allowed.

I have removed all the permissions for that role but it makes no difference.

I have created a 2nd role and assigned the user to only that role and they are not allowed to cancel. Only if they are assigned to this first role.

Is there something special about the first role created in a group that it would override global access to a user removing their account?

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes