RBAC: avoiding too high permissions leading to potential CVE risks

[cyclinder]

Thanks for contributing!

What type of PR is this?

• release/bug

What this PR does / why we need it:

avoiding too high permissions leading to potential CVE risks, see these issues below

Which issue(s) this PR fixes:

Fixes https://github.com/spidernet-io/spiderpool/issues/3420 Fixes https://github.com/spidernet-io/spiderpool/issues/3361

Special notes for your reviewer:

[cyclinder]

waiting for https://github.com/spidernet-io/spiderpool/pull/3603 merged first.

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 81.27%. Comparing base (cd1badc) to head (81a0c48).

Additional details and impacted files

[](https://app.codecov.io/gh/spidernet-io/spiderpool/pull/3608?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=spidernet-io) ```diff @@ Coverage Diff @@ ## main #3608 +/- ## ======================================= Coverage 81.27% 81.27% ======================================= Files 50 50 Lines 4352 4352 ======================================= Hits 3537 3537 Misses 662 662 Partials 153 153 ``` | [Flag](https://app.codecov.io/gh/spidernet-io/spiderpool/pull/3608/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=spidernet-io) | Coverage Δ | | |---|---|---| | [unittests](https://app.codecov.io/gh/spidernet-io/spiderpool/pull/3608/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=spidernet-io) | `81.27% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=spidernet-io#carryforward-flags-in-the-pull-request-comment) to find out more.