NIHVIVO-2855 If editing the root user account, don't allow an ExternalAuthID, or the flag of ExternalAuthOnly.

webapp/src/edu/cornell/mannlib/vitro/webapp/controller/accounts/admin/UserAccountsEditPage.java

@@ -237,6 +237,7 @@ public class UserAccountsEditPage extends UserAccountsPage {
 
 		if (!isRootUser()) {
 			body.put("roles", buildListOfSelectableRoles());
+			body.put("externalAuthPermitted", Boolean.TRUE);
 		}
 
 		body.put("profileTypes", buildProfileTypesList());

webapp/web/templates/freemarker/body/accounts/userAccounts-edit.ftl

@@ -62,9 +62,12 @@
         <label for="last-name">Last name<span class="requiredHint"> *</span></label> 
         <input type="text" name="lastName" value="${lastName}" id="last-name" role="input" />
 
+		<#if externalAuthPermitted??>
             <#include "userAccounts-associateProfilePanel.ftl">
 
             <p><input id="externalAuthChkBox" type="checkbox" name="externalAuthOnly"  <#if externalAuthOnly?? >checked</#if>  />Externally Authenticated Only</p>
+        </#if>
+
         <#if roles?has_content>
             <p>Roles<span class="requiredHint"> *</span></p>
             <#list roles as role>