When you don't use a ldap directory, you can create users, but they can not change their own password ! and more, any user can go see the list of users, if he knows the url.
This feature is available in the very latest release (the ODF one on sourceforge) - each user now has a User Options page, where we will add other personalization preferences in the future.