v6: RBAC

[bevzzz]

This PR adds 3 new namespaces for managing RBAC entities:

• roles: Operations for defining roles and managing their permissions
• groups: Working with RBAC groups
• user.db and users.oidc: Operations for managing users and their assigned roles

Example API (see RbacITest.java for more).

client.roles.create(
  "rock-n-role",
  Permission.aliases("Things_Alias", "Things", AliasesPermission.Action.READ, AliasPermission.Action.DELETE),
  Permission.backups("Things", BackupsPermission.Action.MANAGE),
  Permission.tenants("Things", "tenant-x", TenantPermissions.Actions.CREATE)
  // etc.
);


client.users.db.create("elvis");
client.users.db.assignRoles("elvis", "rock-n-role");
client.users.oidc.assignRoles("external", "rock-n-role");

client.groups.assignRoles("./media-group", "singer-role", "producer-role");
assert client.groups.knownGroupNames().size() == 1; // "./media-group"

client.roles.removePermissions(
  "rock-n-role",
  Permission.aliases("Things_Alias", "Things", AliasesPermission.Action.DELETE)
); 

[orca-security-eu]

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Secrets	0   0   0   0	View in Orca