1258 - Improve permission checks in the backend

[legendword]

Changes

• Modify checks in TapestryHelpers::userIsAllowed (backend) to align with Helper.hasPermission (frontend).
• Change the action names used for node permission checks to lower case to match the frontend action names.
• Introduce UserActions constant class for backend which is a replica of the userActions constant in the frontend.
• Add "move" to the list of user actions.
• Fix a bug where admins cannot directly publish child nodes to a rejected node due to not passing showRejected value in the calls to Helpers.hasPermission in node modal.
• When adding a child node, the frontend now only calls the addNode endpoint instead of both the addNode and addLink endpoints; the addNode endpoint in the backend now takes care of adding the link from parent to child as well as doing some permission checks before adding the child node.
• No longer conditionally update childOrdering of parent node when adding a child node. The childOrdering of parent node is always updated when adding a child node.
• Always show multi-content child nodes and hidden nodes to the admin, even when the admin does not have edit permission on those nodes (this can happen for draft nodes submitted by other users).
• Hide the "edit" button in the SubItemTable used for showing video popups and multi-content child nodes when the user does not have edit permission (it's much better to hide the button instead of alert the user that they do not have edit permission when they click on the button) (again, this can happen for draft nodes submitted by other users). See screenshot below for an example.

Screenshots

The "Edit" button will not show up when the user has no edit permission on that subitem (this applies to a draft node submitted by other users, such as the "Draft A" and "Draft A Private" nodes in the screenshot):

Issue Linkage

Closes #1258

PR Dependency

Depends on: N/A

[cypress[bot]]

---

Test summary

99 • 0 • 0 • 0 • 0

---

Run details

Project	tapestry-wp
Status	Passed
Commit	fc36792fc5
Started	Jan 9, 2023 8:23 PM
Ended	Jan 9, 2023 8:27 PM
Duration	03:38 💡
OS	Linux Ubuntu - 22.04
Browser	Chrome 108

View run in Cypress Dashboard ➡️

---

This comment has been generated by cypress-bot as a result of this project's GitHub integration settings. You can manage this integration in this project's settings in the Cypress Dashboard