extend locking of ldap-synced fields to also work in non-admin mode

Currently user can change ldap-synced fields in his own profile while admin is forbidden to do so. The change extends this behavior to user profile view.