YALB-1554: Remove "Platform admin" from options for site admins when adding or managing site users

[dblanken-yale]

YALB-1554: Remove "Platform admin" from options for site admins when adding or managing site users

Description of work

• Adds and enables role_delegation module
• Sets up role_delegation to only allow site admins to set site admin permission levels
• Update CAS bulk update form to use the role_deleagation module's settings to determine options to select from

Functional testing steps:

• Log in as the admin
• Open the same site in an Incognito window and log in as your own CAS user
• On both sites, visit People
• Take note of your CAS user's access level--it should be only Platform administrator; if not, please set it on the admin user account's page

Test adding non-CAS users

• Do the following as your CAS user:
  • Click Add User in the upper right corner
  • Add in bogus data and ensure that on your logged in user side
  • Verify that you have two options available for roles, Platform administrator and Site administrator
  • Click submit and verify that the user you added has that role

Test adding CAS users

• Do the following as your CAS user:
  • Click Add CAS user(s) in the upper right corner
  • Add gas users, but verify that currently you have two roles available to select from, Platform administrator and Site administrator
• As your admin user:
  • Find your CAS username in the people list and edit
  • Unselect Platform administrator and ensure that Site administrator is selected and save.
• As your CAS user:
  • Refresh the page; you should now only see Site administrator as the only role you can assign
  • Add any CAS users you can think of and submit
  • Verify that those users were added with the Site administrator role

NOTE: I noticed that each time our users log into the site via CAS, it gets the Platform administrator role. My assumption given the CAS group name used is that this does not happen for our users of the platform. If this is incorrect and any logged in CAS user gets this outside of our group, please let me know.

[github-actions]

Created multidev environment pr-426 for yalesites-platform.

[codechefmarc]

@dblanken-yale - I asked Vincent about this and he verified that by default, people get the "Site administrator" role, but we get "Platform admin" by default because we're all special devs. :)

[codechefmarc]

This all worked for me - but I didn't add a CAS user that wasn't already on the site because I don't know a CAS username to add - if you have any examples I'm happy to test. But otherwise, all looked great to me. I've used role delegation in the past and it's really a good one. Approved!

[dblanken-yale]

@codechefmarc Ah true, you can delete and attempt to re-add me if you'd like. I'm the db one. :D April was able to test also so I understand if you're moving on. :)

And thanks for checking with Vincent; I was in "image" mode during standup and forgot to ask. LOL