refactor: remove share role checks

[JammingBen]

Description

Use share permissions instead of roles since roles are a very loose concept and just act as a container for a specific set of share permissions.

This affects 2 main scenarios:

• A SpaceResource doesn't have properties like manager, editor anymore. The same goes for methods like isManager. Instead, there is the members property that holds information about all members. When checking if the current user is allowed to do certain actions, we need check for specific permissions now. E.g. when sharing, don't check for isManager but for canShare.
• Shares (in Graph terms: "permissions") will also have permissions (in Graph terms: "permission actions") that need to be checked instead of roles. Hence the GraphShareRoleIdMap is being removed.

You may notice a discrepancy in our naming and the Graph naming. IMO we should align... but that's a another story, I guess. Because ideally, I would also rename Space to Drive. It's just so confusing all the time.

There is one exception where Web still needs to assume and work with roles. That is when listing the managers of a space. Here we imply that if the user can remove space members, they are a space manager.

Related Issue

• refs [Web & ocis] Make proper use of share permissions instead of roles #10770

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Technical debt
• Tests
• Documentation
• Maintenance (e.g. dependency updates or tooling)

[update-docs]

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

[JammingBen]

This is already being checked in canEditReadme.

[kulmann]

So do I get it right that readContent permission action is not given with a secure view share? Which permission action does the secure view share have for secure-viewing content?

[JammingBen]

I need to check, not sure if there are any permissions 😅

[JammingBen]

Okay so the permissions of a secure view share are these:

* libre.graph/driveItem/path/read
* libre.graph/driveItem/children/read
* libre.graph/driveItem/basic/read

[kulmann]

Thank you for this! I can imagine that it has been a tedious chunk of work. 🤗

[sonarqubecloud]

Quality Gate passed

Issues
15 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.4% Duplication on New Code

See analysis details on SonarCloud