When a user creates an account and goes to the login page (with the
sign-in portlet), they are shown a link to their account settings.
This account settings screen allows the user to edit their password
and name and such, however it also lets them do and see other tabs
with information that may or may not be used in the portal, so that
creates a potential GDPR issue.
For example, the user can add a tag or a comment to their own
account, or they can go to the contact tab and add addresses or social
media info; there is no way to switch these tabs off or make them read-only.
Please implement a way (permissions?) for each of these screens
and/or subsections so it becomes possible to restrict (edit) access or
hide each tab.
