Auto map permssion from OIDC or LDAP user

[efficacy38]

We still need to manually add users to the project if we want external user to get access to a specific project in current setting.

If we think we want a complete RBAC experiment, I think we need at least three features:

1. Distinguish internal and external users (LDAP or OIDC), making it different from external users.
2. Add the role-mapping objects to map the role(boss, department-manager...) to a defined backend role (owner, manager, task runner, guest) with scope(project)
3. Add authZ config of the role which maps the external user to a custom role.
   1. e.g., map LDAP memberGroup or OIDC claim to a role(boss or department-manager we mention above

If it is feasible, I can write some code to contribute this project.

related to #1475 #1499