NEOS-1616: [MIGRATION] Adds RBAC engine

[nickzelei]

This is kind of a large PR but it does a few things here:

• Adds Casbin RBAC engine
• On bootup, upserts existing accounts with their permissions. This is to ensure that all accounts have the latest permission set going forward and for legacy accounts created prior to RBAC being enforced
• On account creation, the following now happens: account policies created, creating user added as account admin
• Adds new RPC method that allows for updating a user's role in the account
• Refactors each RPC service with a new userdata service that now encapsulates all of the previous checks we were doing in the user-account.go files, as well as ensures the user is in the requesting resource's account
• RBAC is an EE feature and is conditionally enabled if neosync api comes online with a EE or neosync cloud license
• API Keys have now been restricted to account_admins only until we enable fine-grained access to users that is based on their role

Each account now has the following roles:

1. account_admin
2. job_developer
3. job_viewer

[linear]

NEOS-1616 Add support for RBAC to Neosync

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Skipped Deployment

Name	Status	Preview	Comments	Updated (UTC)
neosync-docs	⬜️ Ignored (Inspect)	Visit Preview		Dec 14, 2024 0:59am

[codecov]

Codecov Report

Attention: Patch coverage is 26.54370% with 916 lines in your changes missing coverage. Please review.

Project coverage is 34.83%. Comparing base (606354f) to head (7e5a080).
Report is 4 commits behind head on main.

Files with missing lines	Patch %	Lines
backend/internal/ee/rbac/policy.go	0.00%	219 Missing ⚠️
backend/services/mgmt/v1alpha1/job-service/jobs.go	8.00%	158 Missing and 3 partials ⚠️
backend/services/mgmt/v1alpha1/job-service/runs.go	0.00%	131 Missing ⚠️
...rvices/mgmt/v1alpha1/user-account-service/users.go	31.81%	72 Missing and 18 partials ⚠️
...1/transformers-service/userdefined_transformers.go	0.00%	49 Missing ⚠️
backend/internal/cmds/mgmt/serve/connect/cmd.go	0.00%	45 Missing ⚠️
...ces/mgmt/v1alpha1/connection-service/connection.go	39.02%	16 Missing and 9 partials ⚠️
backend/internal/ee/rbac/allow_all_client.go	0.00%	22 Missing ⚠️
...ices/mgmt/v1alpha1/user-account-service/billing.go	56.25%	14 Missing and 7 partials ⚠️
backend/internal/ee/rbac/db.go	0.00%	18 Missing ⚠️
... and 18 more

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2935      +/-   ##
==========================================
- Coverage   35.16%   34.83%   -0.34%     
==========================================
  Files         346      350       +4     
  Lines       40016    40671     +655     
==========================================
+ Hits        14072    14168      +96     
- Misses      24284    24818     +534     
- Partials     1660     1685      +25     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

The latest Buf updates on your PR. Results from workflow Buf / buf (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
✅ passed	✅ passed	✅ passed	✅ passed	Dec 14, 2024, 12:59 AM

[nickzelei]

after more inspection of the functions available, keyMatch is what we actually want.
https://casbin.org/docs/function/