closed #23 user can assign only the rights/roles he himself has
closed #23 user can assign only the rights/roles he himself has