'plugin::users-permissions.user', confirm current password?

Thank you for your reply.

Is this to be done within the strap-server.js file or the front-end?