Modify the User Portlet.
You can always use isUserInRole("Admin") on the render phase and action phase if you don't need something too dynamic
So I have to change the UserPortlet.java or? But then the Option to change the password will still be shown in the portlet...because it is implemented in the jsp. and when I delete it from the jsp, even the admin is not able to see it. Or did I understand sth wrong?
OK I did it...
the "Change Password Form" will be still shown but only admins can change it ;-)