1258 - Improve permission checks in the backend

[legendword]

Changes

• Modify checks in TapestryHelpers::userIsAllowed (backend) to align with Helper.hasPermission (frontend).
• Change the action names used for node permission checks to lower case to match the frontend action names.
• Introduce UserActions constant class for backend which is a replica of the userActions constant in the frontend.
• Add "move" to the list of user actions.
• Fix a bug where admins cannot directly publish child nodes to a rejected node due to not passing showRejected value in the calls to Helpers.hasPermission in node modal.
• When adding a child node, the frontend now only calls the addNode endpoint instead of both the addNode and addLink endpoints; the addNode endpoint in the backend now takes care of adding the link from parent to child as well as doing some permission checks before adding the child node.
• No longer conditionally update childOrdering of parent node when adding a child node. The childOrdering of parent node is always updated when adding a child node.
• Always show multi-content child nodes and hidden nodes to the admin, even when the admin does not have edit permission on those nodes (this can happen for draft nodes submitted by other users).
• Hide the "edit" button in the SubItemTable used for showing video popups and multi-content child nodes when the user does not have edit permission (it's much better to hide the button instead of alert the user that they do not have edit permission when they click on the button) (again, this can happen for draft nodes submitted by other users).

Issue Linkage

Closes #1258

PR Dependency

Depends on: #1222

[legendword]

New change: The "Edit" button will not show up when the user has no edit permission on that subitem (this applies to a draft node submitted by other users, such as the "Draft A" and "Draft A Private" nodes in the screenshot):

[cypress]

---

Test summary

93 • 0 • 0 • 0 • 0

---

Run details

Project	tapestry-wp
Status	Passed
Commit	a1d9d1e
Started	Dec 13, 2022 5:49 AM
Ended	Dec 13, 2022 5:53 AM
Duration	04:50 💡
OS	Linux Ubuntu - 22.04
Browser	Chrome 108

View run in Cypress Dashboard ➡️

---

This comment has been generated by cypress-bot as a result of this project's GitHub integration settings. You can manage this integration in this project's settings in the Cypress Dashboard

[wynnset]

@legendword I think this should be rebased on top of master since it is not 3.0-related and should be available in 2.0 as well! Could you please rebase it?

We'll need to then also rebase the base 3.0 branch (#1219) on this PR.

[legendword]

This pull request is replaced by #1303 which is based on the master branch.