Users who can read group should read group token

Changelog: fixed

app/graphql/types/user_interface.rb

@@ -136,6 +136,10 @@ module Types
     def redacted_name
       return object.name unless object.project_bot?
 
+      if object.groups
+        return object.name if context[:current_user]&.can?(:read_group, object.groups.first)
+      end
+
       return object.name if context[:current_user]&.can?(:read_project, object.projects.first)
 
       # If the requester does not have permission to read the project bot name,

lib/api/entities/user_safe.rb

@@ -11,6 +11,10 @@ module API
 
         current_user = request.respond_to?(:current_user) ? request.current_user : options.fetch(:current_user, nil)
 
+        if user.groups
+          next user.name if current_user&.can?(:read_group, user.groups.first)
+        end
+
         next user.name if current_user&.can?(:read_project, user.projects.first)
 
         # If the requester does not have permission to read the project bot name,