change permission logic for userlist

 - admin can view and edit complete user list
 - user without admin role can view and edit himself