krileon wrote: I'd just use a redirect action and send them back to that users profile with a message if they're not authorized to edit them via your condition.

Can I use substitutions to create a conditíon like
'Logged in users´s' [cb_field] Not Equal To 'Profile owner´s [cb_field]
in order to check if they have the same value on [cb_field] ?
How do I pick up the value of [cb_field] for the currently logged in user?

Thanks.

I have not finished this task, still have some issues.

I have created a Group structure as of Kyle´s suggestion.
I also created an Access level as suggested.

Partially, this works. The group moderators can only edit the users in their own group.
But instead of firing the Auto Action as described below, something else triggers and halts the edit attempt, with this message on a blank page:

"You cannot edit a `GROUP`. Only higher-level users have this power."

where GROUP is the group the user is assigned to. Stopping on a blank page is not the bet solution.
I dont know if it is CB that displays this message, it is not present in the language of my language file, so it is not translated.

I have installed Auto Action, always use the latest nightly build.

This Auto Action is ordered first in the action list.

Type: Redirect
Triggers: onBeforeUserUpdate, onBeforeUserProfileEditRequest.

Condition: [cb:userdata field="cb_loge" user="#me" /] NotEqualTo [cb_loge]
(checks if logged in user is authorised to edit, else go back with a meddage)

Action URL: return (go back to previous page)
Action message: You are not authorised to edit this user.


My intention with this Auto Action is to leave the moderator on the same page instead of viewing a blank page, and give a meaningful message.

krileon wrote: That's CBs access check. To redirect before that gets displayed you have to use onBeforeUserProfileEditRequest trigger then perform your redirect. Return redirect likely won't work here. If you want to send them back to the users profile they're attempting to edit use the following redirect URL.

index.php?option=com_comprofiler&view=userprofile&user=[user_id]

Ok thanks for the suggestion,
I already had the onBeforeUserProfileEditRequest trigger, so I deleted the other trigger in case it conflicted.
Unfortunately, that did not make any difference, onBeforeUserProfileEditRequest does not fire.
It looks like CBs access check still has priority.