feat(permissions): filter fields in forms based on read/write permissions

[tomwwinter]

• filter fields in forms with no read permission
• disable fields in edit mode with read-only permissions

Can be tested with this permissions:

const rules: DatabaseRules = {
  user_app: [
    { subject: "Child", action: "read", fields: ["name"] },
    { subject: "Child", action: "manage", fields: ["name", "dateOfBirth"] },
  ],
  admin_app: [{ subject: "all", action: "manage" }],
}

related to: #1912

Visible/Frontend Changes

• filter fields with now read permission in detail view
• disable fields with no write access in edit mode

Architectural/Backend Changes

• none

[github-actions]

Deployed to https://pr-2180.aam-digital.net/

[TheSlimvReal]

Thanks for the goods start already. The functionality looks good, lets try to refactor this so we can use the same approach in all forms.

[TheSlimvReal]

I am currently wondering whether instead of listening to the status changes, we can also just overwrite the enable function of the FormGroup. So a subclass FormGroupWithPermission so this whole "what can be enabled" would all be built-in instead of managed from the outside. For me this feels a bit more straight forward, how well the general extending of Angular classes works in the long run, I am not sure. Lets discuss this.

[TheSlimvReal]

Code looks very good now. I only changed some small things. When playing with it I discovered a functionality issue though:

Currently the disabled state is always applied based on the update permissions. This means that the property is also disabled when a new entity (e.g. a new Note) is created even if the user has create permissions on the property. I think there is a valid use case where users are allowed to set a property initially, but once the entity already exists they are not allowed to change it anymore. Therefore I think for new entities the disabled state should be evaluated based on the create permission for a field.

[TheSlimvReal]

Works great now. Thanks.

[aam-digital-ci]

🎉 This PR is included in version 3.30.0-master.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

[aam-digital-ci]

🎉 This PR is included in version 3.30.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀