Add explicit permissions for toggling weather stations in prep sheets

[andrea-williams]

As an RWCO/ZWCO/maybe forecaster I want To be able to toggle on/off the weather stations used when calculating HFI & prep levels in a planning area So That I can complete a prep sheet for my planning area/fire centre using only the stations that I consider to be relevant to the current fire situation.

As an non-RWCO/ZWCO I want To be able to view a prep sheet So That I can know how bad things are going to be in my area/fire centre, but I should not be able to edit the weather stations being used to calculate prep levels because I cannot be trusted.

Additional Context

• Keycloak docs: https://www.keycloak.org/docs/latest/server_admin/#con-client-roles_server_administration_guide
• it's probably best to start on the backend of this ticket first
• Keycloak spike doc: https://bcgov.sharepoint.com/:w:/t/01324/EV1OOXcFlkpDokbe3s2eH5oBCROLaZTe4F2UWoy-ztbvQQ?e=kaQ2tg

Acceptance Criteria

• Given I am logged in as some user with {station selection} rights, When I navigate to a fire centre in HFI Calc, Then the checkboxes next to each weather station are enabled, and I am able to toggle on/off those checkboxes, and the prep level (etc.) values are immediately updated when a selection changes, and my changes should persist.
• Given I am logged in as some user WITHOUT {station selection} rights, When I navigate to a fire centre in HFI Calc, Then the checkboxes next to each weather station are disabled, and I am not able to make any changes to which stations are included/excluded in calculations.
• Given I am logged in as some user WITHOUT {station selection} rights, When I try to hack the system by modifying the network request to a POST request with a modified value for the "selected station codes", Then the POST request fails and my attempted changes are not persisted.
• There exist unit tests covering all of the above AC.

Definition of Done

• Ready to Demo in Sprint Review
• Does what I have made have appropriate test coverage?
• Documentation and/or scientific documentation exists and can be found
• Peer Reviewed by 2 people on the team
• Manual testing of all PRs in Dev and Prod
• Merged

[andrea-williams]

Hey team! Please add your planning poker estimate with ZenHub @conbrad @Sybrand