fix #10209: restrict one's changes to user, group

[mtbc]

To test, work with SQL to make sure that you cannot rename the root, guest users, nor the system, user, guest groups, nor can you remove the root user from the system or user groups. Also test that other changes on those tables -- updates, deletes -- remain permitted.

Also, given #1595, check that http://hudson.openmicroscopy.org.uk/job/OmeroJava-integration-develop/lastCompletedBuild/testngreports/integration/integration.AdminServiceTest/ continues to pass.

Fixes https://trac.openmicroscopy.org.uk/ome/ticket/10209.

--no-rebase

[atarkowska]

This works fine, the trouble is that in #565 system users were prevented from removal from the group on webadmin/experimenter/edit page but I can still easily to click X on webadmin/group/edit page. Does it make sense if I fix webadmin and merge with this PR?

ValidationException at /webadmin/group/save/0/

exception ::omero::ValidationException
{
    serverStackTrace = ome.conditions.ValidationException: experimenter 'root' may not be removed from the 'system' or 'user' group
    at ome.logic.AdminImpl.removeGroups(AdminImpl.java:710)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

[atarkowska]

[atarkowska]

please merge mtbc#7

[atarkowska]

maybe someone else could look at this as well

[joshmoore]

@aleksandra-tarkowska : No one else can merge 7 other than @mtbc. Would you like to close it and open a full PR?

[atarkowska]

ok doing that

[atarkowska]

moved to #1733

[joshmoore]

I also tested via the DEV6 --> 5.0 script while looking at ticket 10703. 👍