Allowing authorities that can edit external identifiers to see all external identifiers.

Author: krulis-martin

app/model/view/UserViewFactory.php

@@ -45,7 +45,7 @@ public function __construct(IUserPermissions $userAcl, Logins $logins, \Nette\Se
      */
     private function getExternalIds(User $user, bool $canViewAllExternalIds = false)
     {
-        if (!$canViewAllExternalIds) {
+        if (!$canViewAllExternalIds && !$this->userAcl->canSetExternalIds($user)) {
             if (!$this->loggedInUser) {
                 return [];
             }

tests/Presenters/UsersPresenter.phpt

@@ -855,6 +855,7 @@ class TestUsersPresenter extends Tester\TestCase
 
         Assert::equal($user->getId(), $payload['id']);
         Assert::true($payload['privateData']['isExternal']);
+        Assert::equal(['test-cas' => 'abc'], $payload['privateData']['externalIds']);
 
         $els = $this->presenter->externalLogins->findAll();
         Assert::count(1, $els);
@@ -887,6 +888,7 @@ class TestUsersPresenter extends Tester\TestCase
 
         Assert::equal($user->getId(), $payload['id']);
         Assert::true($payload['privateData']['isExternal']);
+        Assert::equal(['test-cas' => 'abc'], $payload['privateData']['externalIds']);
 
         $els = $this->presenter->externalLogins->findAll();
         Assert::count(1, $els);
@@ -918,6 +920,7 @@ class TestUsersPresenter extends Tester\TestCase
 
         Assert::equal($user->getId(), $payload['id']);
         Assert::false($payload['privateData']['isExternal']);
+        Assert::equal([], $payload['privateData']['externalIds']);
 
         $els = $this->presenter->externalLogins->findAll();
         Assert::count(0, $els);