split users and groups permissions

[EdB]

The permission to edit a user also means permission to edit groups. it seems to me that even with our current permissions situation, those two ought to be split in half.

Also, not really related, clicking a group name should be like a filter to show members in that group. Editing the group's settings can be done via the "edit" link in the actions column.