it only checks for lldap_admin, and it checks the permissions of the user you're requesting the password change for, not your permissions