Show non-obvious permission holders with arrow notation

[AlanCoding]

SUMMARY

Here are issues that this addresses, and a corresponding screen shot for those cases:

#4108

#1087 closed, but the prior solution does not display who has read permission, so this is an outright re-work of #3721

ISSUE TYPE

• Bugfix Pull Request

COMPONENT NAME

• API

AWX VERSION

6.1.0

ADDITIONAL INFORMATION

This is also blocking of #3903

So the real issues this addresses are 3903 and 4108

[softwarefactory-project-zuul]

Build failed.

• awx-api-lint : SUCCESS in 3m 57s
• awx-ui-lint : SUCCESS in 4m 26s
• awx-ui-next-lint : SUCCESS in 4m 30s
• awx-api : FAILURE in 9m 20s
• awx-ui : SUCCESS in 4m 16s
• awx-ui-next : SUCCESS in 5m 56s
• awx-swagger : FAILURE in 11m 15s
• awx-detect-schema-change : FAILURE in 10m 36s (non-voting)

[softwarefactory-project-zuul]

Build succeeded.

• awx-api-lint : SUCCESS in 3m 08s
• awx-ui-lint : SUCCESS in 4m 20s
• awx-ui-next-lint : SUCCESS in 5m 08s
• awx-api : SUCCESS in 9m 54s
• awx-ui : SUCCESS in 5m 30s
• awx-ui-next : SUCCESS in 5m 50s
• awx-swagger : SUCCESS in 10m 44s
• awx-detect-schema-change : FAILURE in 11m 02s (non-voting)

[wenottingham]

I think this (as a UX) makes it more confusing, and this is probably better fixed on the UI side, or at least with UI help. The key issue is it showing 'admin' when you don't actually have admin....

[AlanCoding]

Yes, this can be done entirely on the UI side. To summarize the JSON data I posed in other issue:

        {
            "id": 8,
            "type": "user",
            "..."
            "summary_fields": {
                "direct_access": [],
                "indirect_access": [
                    {
                        "role": {
                            "name": "Admin",
                            "description": "Can manage all aspects of the organization",
                            "resource_name": "alan",
                            "resource_type": "organization",
                            "..."
                        },
                        "descendant_roles": [
                            "read_role",
                            "use_role"
                        ]
                    }
                ]
            },
            "..."
        }

The meaning of this is

• "this user has Admin role to the alan organization"
• "holding this role grants user read & use role to the resource"

Let me know if there are any questions about the meaning of data the API returns. Ping @trahman73, as well.

[AlanCoding]

#4529