Bug Fix
1- Fixed: USER and RESELLER accounts could not enable their own two-factor authentication and received an Access denied error. Personal 2FA endpoints are now correctly treated as self-service for every authenticated user (like changing your own password); ROOT was unaffected.