Separate Form Builder and Home page permissions

[ebruchez]

Currently, form-builder-permissions.xml controls:

• Form Builder
  • whether the user can create/edit/publish a form definition with a given app name
• Home page
  • whether the user has "admin" permissions on a form definition, which includes
  • making available/unavailable
  • pushing/pulling
  • upgrading

This also enables the "Reindex" button (see #2905).

Instead, we would like to have separate permissions, expressed in a consistent way:

• whether the user has CRUD access to a given form definition
  • would be like general CRUD permissions, but applied to orbeon/builder
  • see also #1149
• whether the user has publish access to the form definition
  • can apply to Form Builder and the Home page
  • could cover making available/unavailable, push/pull, and upgrading
• whether the user has a general admin permission (see #2905)

This is similar to #1149, but the latter was about handling the form permission attribute.

Might require implementing #1487.

[ebruchez]

With #1860, we want to have per-app and global permissions configuration. This would enable setting permission for orbeon/builder in the properties.

[ebruchez]

+1 from customer

[ebruchez]

1860 was implemented with 2022.1. Does it help at all?