[US051] [Chethan] Restricting staff user from making themselves superuser, grant any permissions to anyone, and giving them access to only change their profile and active user's username and password