utils: remove self administration from all automatic roles (#22415)

src/authentic2_cut/utils.py

@@ -205,7 +205,8 @@ def update_roles():
                 role.permissions = permissions
             else:
                 role.permissions.clear()
-            role.add_self_administration()
+            # remove self administration
+            role.permissions.remove(role.permissions.filter(target_ct=role_ct, target_id=role.pk))
             child_of_ou = tpl.get('child_of_ou', [])
             for child in child_of_ou:
                 child_ou = None