[Feature]: Add Role based access control to running workflows - update StartOptions endpoint

[wouter1975]

Refinement of ticket after discussion on 11-2:

Requirements:

• Ability to assign privileges per group
• Ability to check privileges halfway a workflow
• Make it possible to check authorization at each input type step
  like suspend, callback input steps (iow when a user/proces changes the workflow into running state)
• Dropped requirement: ability to change the minimal rights in the UI. This should be a handled by the auth implementation of the application

Suggested solution

• extend the graphql calls for populating the Start dropdown menu items, to include a state flag (eg isAllowed bool) to rendering the workflow item in normal or disabled state.

{
    "data": {
        "workflows": {
            "page": [
                {
                    "name": "create_core_link",
                    "isAllowed":"true",
                    "products": [
                        {
                            "productType": "Corelink",
                            "productId": "7dc2a409-465b-4844-b858-083a8fe371da",
                            "name": "SN8 Corelink"
                        }
                    ]
                },
                {
                    "name": "create_node",
                    "isAllowed":"false",
                    "products": [
                        {
                            "productType": "Node",
                            "productId": "a0a6c2b1-fcb9-4c5c-9293-5867f06a6356",
                            "name": "SN8 Node"
                        }
                    ]
                },

In other tickets:

• Extend the stepdecorator to call an optional function, which is performing the isAllowed function by the attribute workflow_name, workflow_step_name (optional) and user. If this function returns true the workflow (step) can be executed.

  • Update the https://github.com/update, @inputstep and @workflow decorators to include the isAllowed function.
    [Feature]: Add Role based access control to running workflows - update decorators #782

• extend the graphql calls for populating the Tasks dropdown menu items, to include a state flag (eg isAllowed bool) to rendering the workflow item in normal or disabled state.
  [Feature]: Add Role based access control to running workflows - update task drown endpoint #822