Prevent skills from being edited unless has permission

[rythos42]

There's some great stuff here, but I don't have Azure permission to create custom roles.

Wondering if we can:

• Add scopes to app registrations
• Provide scopes to custom roles
• Ask for those scopes when we log in
• Check the scope was granted when we perform an action

This could be a great model for how I'm thinking JUDI should work, if it works.

Here's some resources: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/roles-create-custom#create-a-new-custom-role-to-grant-access-to-manage-app-registrations

https://docs.microsoft.com/en-us/powershell/module/azuread/connect-azuread?view=azureadps-2.0

https://www.andrewconnell.com/blog/leverage-custom-permissions-in-azure-ad-applications/

[rythos42]

I'm waiting to talk with an Azure consultant about JUDI permission architecture before I tackle this one. Whatever we decide to do in JUDI, I'd like to prototype here.