Poc dynamic role creation

[bolmsten]

Description

This pull request introduces dynamic role creation and assignment for users.

Motivation and Context

This change is necessary to provide flexibility in role management and permissions handling. It aims at solving the problem of hard-coded roles and permissions, making the system more flexible to accommodate different user access levels and permissions.

Changes

1. A new SQL script is introduced to create dynamic user roles in the database, which includes permissions and data access fields.
2. Modifications in the backend to handle these new dynamic roles and assign them to users.
3. Changes in ProposalAuthorization and UserAuthorization to check data access and permissions for the dynamically created roles.

My proposal is to continue using pre-defined roles and dashboards, but allow for the creation of dynamic roles that has two attributes: “data access” and “permissions/config”. I added a new role/dashboard, dynamic_proposal_reader, and created two dynamic roles—ISIS_READ and CLF_READ—both using the dynamic_proposal_reader role/dashboard. The only difference between these roles is the set of instruments associated with each. That would allow users to login and see a proposal table with only the proposals that has the instruments associated with their dynamic role.

We would need to define a set list of dashboards to be used, we can do minor configurations for each dashboard using a config defined on the dynamic role and we can set the data access either by using tags or instruments. I have not shared this approach with the STFC/ELI team yet, but it would be great to know if this approach is at all viable.

It would also allow for different facilities to rename roles like FAP Reviewer to PEP Reviewer.