We have a situation where we have created a handful of generic accounts to access certain child portals. These accounts are given to a whole department, for example, and keeps us from having to create hundreds of individual accounts.

But we have run into a problem where one user went into “Manage Profile” and changed the password, locking everyone else out. (Not on purpose, she just did not understand it was a shared account.)

We want to be able to allow our regular users to manage their own profile, but block certain accounts from doing the same.
Is there a way to set security on the manage profile page? It acts like a module but does to let me set security access like one.

I can hard-code the account names into the skin to hide the profile link, or add a profile property and modify the source code to control access to the edit profile page based on that property, but is there a better way? Help?