Problem:
A “normal” user is able to access the users management and can change their own quota or manager other users
Answer:
Its very likely that you have given this user the “Group Admin” permission. Informations about this “Group Admin” is available here:
To remove this “Group Admin” permission you have to make sure no group is chosen in the “Group Admin” dropdown menu as shown in the attached screenshot.