How can a user change password?

I have created a user with access to:
admin.login
admin.pages

but when the user clicks on his/her profile it is shown "Access Denied". How can he/she change their password?

Grav 1.1 and Admin 1.1 should have solved this, are you using that or 1.0.10?

I'm using v1.0.1 as this is an internet-facing website.
Its great to see this is solved in v1.1, when it becomes public (i.e.: not beta or RC) I will definitely test and roll out then. Looking more and more forward to 1.1 !