anchor.diff:          <td><%= f.text_field :sis_user_id, :style => "width: 150px;" %></td>
         </tr>
         <% if can_do(Account.site_admin, @current_user, :manage_user_logins) %>
  -        <% js_env :PASSWORD_POLICIES => Hash[Account.root_accounts.active.map{ |a| [a.id, a.password_policy]}] %>
  -        <tr class="account_id">
  +          <% js_env :PASSWORD_POLICIES => Hash[Account.root_accounts.active.map { |a| [a.id, a.password_policy] }] %>
  +          <tr class="account_id">
               <td><%= f.blabel :account_id, :en => "Account" %></td>
               <td>
  -              <% accounts = Account.root_accounts.active.map{|a| [a.name, a.id] }.sort_by(&:first) %>
  +              <% accounts = Account.root_accounts.active.map { |a| [a.name, a.id] }.sort_by(&:first) %>
                 <%= f.select :account_id, accounts, {:selected => @domain_root_account.id}, :class => "account_id_select" %>
               </td>
  -        </tr>
  +          </tr>
         <% else %>
  -        <tr style="display: none;">
  -          <td class="default_account_name"><%= @domain_root_account.name %></td>
  -        </tr>
  +          <tr style="display: none;">
  +            <td class="default_account_name"><%= @domain_root_account.name %></td>
  +          </tr>
         <% end %>
  -      <tr class="password">
  -        <td><%= f.blabel :password, :en => "Password" %></td>
  -        <td><%= f.password_field :password, :style => "width: 150px;" %></td>
  -      </tr>
  -      <tr class="password">
  -        <td>&nbsp;</td>
  -        <td><%= f.password_field :password_confirmation, :style => "width: 150px;" %></td>
  -      </tr>
  +      <% if account_context(@context).settings[:admins_can_change_passwords] %>
  +          <tr class="password">
  +            <td><%= f.blabel :password, :en => "Password" %></td>
  +            <td><%= f.password_field :password, :style => "width: 150px;" %></td>
  +          </tr>
  +          <tr class="password">
  +            <td>&nbsp;</td>
  +            <td><%= f.password_field :password_confirmation, :style => "width: 150px;" %></td>
  +          </tr>
  +      <% end %>
         <tr>
           <td colspan="2">
             <div class="button-container">
  
positive.code:         </td>
        </tr>
      </table>
    <% end %>
  
negative.code: <% jammit_css :user_logins %>
  <% js_bundle :user_logins %>
  <% js_env :PASSWORD_POLICY => @domain_root_account.try(:password_policy) %>
  <fieldset id="login_information">
    <legend><%= t('titles.logins', 'Login Information') %></legend>
    <table>
      <% pseudonyms = @user.all_active_pseudonyms + [nil] %>
      <% pseudonyms.each do |pseudonym| %>
          <% can_change_pseudonym_password = (pseudonym && pseudonym.account && pseudonym.account.settings && pseudonym.account.settings[:admins_can_change_passwords]) && pseudonym.account.canvas_authentication? %>
          <tr class='login <%= 'blank' unless pseudonym %>' style="<%= hidden unless pseudonym %>">
            <th scope='row'>
              <b class='unique_id'><%= pseudonym && pseudonym.unique_id %></b>
              <% if pseudonym && ((pseudonym.sis_user_id && can_do(pseudonym.account, @current_user, :read_sis)) || can_do(pseudonym.account, @current_user, :manage_sis)) %>
                  <div style="font-size: 0.8em; padding-left: 20px;">
                    <%= before_label('sis_id', 'SIS ID') %>
                    <span id="sis_user_id_<%= pseudonym.id %>" class="sis_user_id"><%= pseudonym.sis_user_id %></span>
                  </div>
                  <div style="display:none" class="can_edit_sis_user_id"><%= can_do(pseudonym.account, @current_user, :manage_sis) %></div>
              <% end %>
            </th>
            <td class='account'>
  