How to delegate permission to user to update only his attribute

i create GPO logon that Update user descreption

and to do  that h had to delegate  Permission "property-specifc" to user to write in descreption  attribute

and that work

but the problem is the user can update other user descreption if he use secripts

and i want user to update only his descreption