Check permission when changing permissions for users.

config/permissions.yaml

@@ -239,7 +239,7 @@ perms: # Here comes a list with all Permission names (they have a perm_[name] co
         bit: 4
       delete:
         label: "perm.delete"
-        alsoSet: ['read', 'edit']
+        alsoSet: ['read', 'edit_username', 'edit_infos']
         bit: 8
       edit_username:
         label: "perm.users.edit_user_name"
@@ -259,7 +259,7 @@ perms: # Here comes a list with all Permission names (they have a perm_[name] co
         bit: 12
       set_password:
         label: "perm.users.set_password"
-        alsoSet: 'set_read'
+        alsoSet: 'read'
         bit: 14
       change_user_settings:
         label: "perm.users.change_user_settings"

src/Form/UserAdminForm.php

@@ -116,7 +116,7 @@ class UserAdminForm extends AbstractType
             ->add('permissions', PermissionsType::class, [
                 'mapped' => false,
                 'data' => $builder->getData(),
-                //'user' => $builder->getData(),
+                'disabled' => !$this->security->isGranted('edit_permissions', $entity)
             ])
         ;
         /*->add('comment', CKEditorType::class, ['required' => false,