disable changing user role and username for non-admin user