Collabra Authsome mode
This should be a drop-in replacement, working exactly the same for admin users, with some functionality built in for 'Managing Editors', 'Senior Editors' and 'Reviewers', and a good set of defaults for further dev.
Adds:
- a skeleton for a Collabra authorization mode. It should be easy to continue the authorization work with this as a basis.
- a UsersManager link at /users. There you can manage membership in global teams (to answer questions like: is a user a 'Managing Editor'?).
I see further development happening by:
- adding a new test where you set the conditions as they need to be for a certain check (e.g. create a manuscript that is in 'review', and then check that the user can't read the 'review' fragments, etc.)
- write the authsome mode code to handle that situation
- repeat
Most of the tests should be in https://gitlab.coko.foundation/xpub/xpub/blob/bc28440e5ff0eddb3c9e3dfd71fb19fe05aa97e0/test/authsome/index.test.js, but one can write some integration tests too (these actually talk to the server and create objects, etc).