User should not be able to change permission of file based on permissions set on the file (they do not explicitly have the "change permissions" right)