Improve User Management - Add the ability to remove roles that have been directly added to users

[crisr15]

Story

Currently when a role has been directly added to a user it can not be removed. There is no option to edit permissions from the manage users page. Add the ability for users with the manage user role to remove roles from users who have either manage user roles or below. Add the ability for users with the admin role to remove roles from any user. This only applies to roles directly added to users, and you should not be able to remove roles added to a user by a group.

Acceptance Criteria

• After a role has been added directly to a user (user A), a user (user B) with permissions 'user manager' can remove the roles directly added to user A if user A is not an admin
• After a role has been added directly to a user (user A), a user (user B) with permissions 'admin' can remove the roles directly added to user A.
• Roles added by groups can not be removed without removing the user from the group. (dev note: is this saying that if a user is part of a group, you can't remove group roles it has?)

Screenshots / Video

Current functionality does not have any way to remove a role from a user.

Testing Instructions

• As a user who has a 'user manager' role, add a role directly to a user (User A) who is not an admin.
• As a user who has a 'user manager' an 'admin' role, add an admin role directly to a user (User C).
• As a user with role 'user manager' remove that role from the user A.
• As a user with role 'user manager' try to remove admin role from user C. You should not be able to.
• As a user with role 'admin' remove admin role from user C.
• As a user with role 'admin' try to remove a role that was inherited from a group. You should not be able to.

Notes

[crisr15]

Did not have room in the budget to complete during the Workflow Sprint. This item has been moved back to no status to be reprioritized.

[laritakr]

QA results

• As a user who has a 'user manager' role, add a role directly to a user (User A) who is not an admin. Passed

As [email protected], added work editor role to [email protected]

• As a user who has a 'user manager' an 'admin' role, add an admin role directly to a user (User C). Passed

As [email protected], added admin to [email protected]

• As a user with role 'user manager' remove that role from the user A. Passed

As [email protected], removed user manager role from [email protected]

• As a user with role 'user manager' try to remove admin role from user C. You should not be able to. Passed

As [email protected], cannot remove admin role from [email protected]

• As a user with role 'admin' remove admin role from user C. Passed

As [email protected], added, then removed admin role from [email protected]

• As a user with role 'admin' try to remove a role that was inherited from a group. You should not be able to. Passed

As [email protected], was unable to remove Admin group from [email protected] (button is inactive)