Can vendors edit their own profiles and rates?

Only if you allow it. You control whether a vendor can edit rates, their profile, both, or neither. Any change they make triggers a notification to you. All changes are logged for a full audit trail.