[v2.0] support onlyAssigned option for method getUsersInRole

[jsamr]

Use case
In my model, 'project.member' is a sub-role of 'project.manager'. If I want a list of all project members that are not managers, AFAIK I cannot yet. Well yes, I can filter the output of getUsersInRole but that's not convenient.

Solution
The method getRolesForUser already support this option :

onlyAssigned: return only assigned roles and not automatically inferred (like subroles)

So basically, the idea is to filter users which role param has an assigned:true field, perhaps using Roles._onlyAssignedMatcher method.

[mitar]

Can you elaborate?

[jsamr]

I updated the above comment.

[mitar]

Yes, this sounds reasonable. Pull request welcome.