lite ui attribute assignment on attribute assignments should require ATTR_UPDATE on the assignee attribute definition not ATTR_ADMIN

If a non admin is assigning an attribute to an attribute assignment that they did not create (e.g. a rule), then unless the grouper admin gives them ATTR_ADMIN on the rule attribute definition (not a good idea), then they wont be able to do it.