<openerp>
    <data>
        <!-- Admin group -->
        <record id="instance_admin" model="res.groups">
            <field name="name">GooDoo Admin Instancji</field>
        </record>

        <!-- Template user for new users signing in via the website -->
        <record id="bestja_template_user" model="res.users">
            <field name="name">GooDoo Template User</field>
            <field name="login">bestjatemplate</field>
            <field name="active" eval="False"/>
            <field name="groups_id" eval="[(6, 0, [ref('base.group_user')])]"/>
        </record>

        <!-- make it the default template -->
        <record id="auth_signup.default_template_user_config" model="ir.config_parameter">
            <field name="key">auth_signup.template_user_id</field>
            <field name="value" ref="bestja_template_user"/>
        </record>

        <!-- allow user sign-up by default -->
        <function model="ir.config_parameter" name="set_param" eval="('auth_signup.allow_uninvited', True)" />

        <!-- Allow user-triggered password reset by default. -->
        <function model="ir.config_parameter" name="set_param" eval="('auth_signup.reset_password', True)" />
    </data>
</openerp>

<openerp>
    <data>
        <!-- Admin group -->
        <record id="instance_admin" model="res.groups">
            <field name="name">GooDoo Admin Instancji</field>
        </record>

        <!-- Template user for new users signing in via the website -->
        <record id="bestja_template_user" model="res.users">
            <field name="name">GooDoo Template User</field>
            <field name="login">bestjatemplate</field>
            <field name="active" eval="False"/>
            <field name="groups_id" eval="[(6, 0, [ref('base.group_user')])]"/>
        </record>

        <!-- make it the default template -->
        <record id="auth_signup.default_template_user_config" model="ir.config_parameter">
            <field name="key">auth_signup.template_user_id</field>
            <field name="value" ref="bestja_template_user"/>
        </record>

        <!-- allow user sign-up by default -->
        <function model="ir.config_parameter" name="set_param" eval="('auth_signup.allow_uninvited', True)" />

        <!-- Allow user-triggered password reset by default. -->
        <function model="ir.config_parameter" name="set_param" eval="('auth_signup.reset_password', True)" />

        <!-- Allow instance admin to access user password change wizard -->
        <record model="ir.actions.act_window" id="base.change_password_wizard_action">
            <field name="groups_id" eval="[(4, ref('bestja_base.instance_admin'))]"/>
        </record>
    </data>
</openerp>

Allow instance admin to change users' passwords
Allow instance admin to change users' passwords
