Only redirect for save and user does not have core.manage permission (#42872)

Author: joomdonation

administrator/components/com_users/src/Controller/UserController.php

@@ -118,8 +118,8 @@ public function save($key = null, $urlVar = null)
         }
 
         // If a user has to renew a password but has no permission for users
-        if (!$this->app->getIdentity()->authorise('core.admin', 'com_users')) {
-            $this->setRedirect('index.php');
+        if ($task === 'save' && !$this->app->getIdentity()->authorise('core.manage', 'com_users')) {
+            $this->setRedirect(Uri::base());
         }
 
         return $result;