Tag / Agent permissions

[moshloop]

Allow permissions on tag or agent so that users can only see components / configs that they have access to

e.g. using https://docs.postgrest.org/en/v12/explanations/db_authz.html

Casbin

• Will need a role called user that provides an empty interface
• Add casbin conditions

RLS

• Will need to inject the conditions that a user can access into the JWT claims passed to postgrest so that they can be used with row level security
• /api/catalog, /api/topology, /api/resources/search will need to be wrapped in a db session that mimics what postgrest does
• Add feature flag (db.rowLevelSecurity) to turn on and off row level security