managed to change my own username in spite of unchecked "change own username" in access control

Added a new role "user administrator"
Added user "useradmin" with role "user administrator"
In access control unchecked "change own username" for "user administrator"
Logged in as "useradmin" and managed to change my own username.