prevent adding/removing guardians without global change_subject permission (version 3)

Bengfort requested to merge fix-add-guardian-perm-3 into main

replaces !2045 (closed)

I hope this version is cleaner and easier to understand because without the necessary permissions …

  • the model fields are removed completely
  • a completely separate (and therefore simpler) template is rendered

I also added a missing privacy level check for guardians_add

Edited by Bengfort

Merge request reports