RBAC: Users with permission to set global permissions to roles can set any permission

### Is your feature request related to a problem?

Users with permission to set global permissions to roles can set any permission to roles. This is a way of self elevating access.

### Describe the solution you'd like

A user should only be able to set the permissions they themselves have access to, to prevent self elevation of access.

### Describe alternatives that you've considered

No alternative, this has been omitted from our use case due to the security implications.

### Additional context

_No response_