[HOLD] Add display messages

[jcoyne]

[on hold until administrative permissions are worked out]

Why was this change made?

Add Home page messages. Fixes #924

How was this change tested?

Which documentation and/or configurations were updated?

[jmartin-sul]

some nitpicky questions, overall looks good to me (but also i'd be hesitant to merge myself, since i'm not very familiar with stimulus, and since there aren't screenshots and i haven't tested, though i'm sure you have/will on stage)

[andrewjbtw]

@jcoyne I've created a specific workgroup for being able to edit these messages: sdr:argo-message-editors

[jcoyne]

@andrewjbtw the problem is that prior to this pull request, we have given members of sdr:administrator-role the ability to do everything in Argo. Are you asking me to remove that ability? Do you want to create workgroups for all other types of access?

[ndushay]

can we get an image of what these changes look like?

[jcoyne]

@ndushay on the issue: #924 (comment)

[andrewjbtw]

So unfortunately, we're going to have to put this on hold until administrative permissions are worked out, which might not be for a long time. The problem with this feature vs. other features people have admin access to is that these messages are displayed prominently on the front page for everyone and too many (100+) people would have full edit access under the current permissions scheme. The risk is low that people would abuse their access, but it's the kind of thing where it would be hard to explain why it was left open if something did happen.

It's true that admin access means that many users could cause other types of problems, but I don't think any other change people can make would be displayed to all users as soon as they load Argo, and there are other permissions (like APOs) that limit the scope of what people can do. What we really need to do is rationalize permissions, which is something I'll be working on, first by mapping out the current workgroup situation. As I understand it, Argo was originally intended to be adminstrator-only, with not a large user base, which is probably why people kept getting added to the admin roles.