Enhancement: add permission check when assigning and removing roles 

Everyone could add and remove roles from users.  
Added a new permission and a check so that only users with the role management permissions can assign and unassign roles.


https://github.com/owncloud/ocis/issues/879
