✨Personalized resource limits: only allow specific groups to override resources

[sanderegg]

What do these changes do?

General idea:

• we can define which group can or cannot override services resources by changing the values in the table groups_extra_properties manually.
• create new override_services_specifications column in groups_extra_properties
• PUT /projects/{project_uuid}/nodes/{node_id}/resources only usable by users within these groups
• new entrypoint on webserver GET /me/permissions that returns a list of users permissions:
  • currently only returns the permission named override_services_specifications
  • should allow to synchronise _access_roles with the pendant in the frontend
    
• new GroupsExtraProperties repository in postgres-database library:
  • aggregates these by following priority: 1. primary group, 2. any Truthy value in standard groups, 3. everyone group
• fixes issue where a service resources from a converted project where no specific required_resources were defined originally could not be changed
• frontend only sets the limits, this ensures both limits and reservations are set to the same value

Bonus:

• update adminer to 4.8.1
• improves error message when there is not enough resources to run a computational service in the default cluster by making the message more human readable:
  

Related issue/s

How to test

groups extra properties

make devenv
cd package/postgres-database
make install-dev
clear && pytest --asyncio-mode=auto tests/test_test_utils_groups_extra_properties.py

DevOps Checklist

[codecov]

Codecov Report

Merging #4417 (0f722e7) into master (fd95cd3) will increase coverage by 2.1%.
The diff coverage is 92.9%.

@@           Coverage Diff            @@
##           master   #4417     +/-   ##
========================================
+ Coverage    83.1%   85.3%   +2.1%     
========================================
  Files         963    1000     +37     
  Lines       40927   42817   +1890     
  Branches     1012    1026     +14     
========================================
+ Hits        34018   36526   +2508     
+ Misses       6675    6056    -619     
- Partials      234     235      +1     

Flag	Coverage Δ
integrationtests	61.0% <54.9%> (-6.8%)	⬇️
unittests	83.8% <92.9%> (+3.5%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
...ostgres_database/models/groups_extra_properties.py	100.0% <ø> (ø)
...imcore_service_webserver/security/_access_roles.py	100.0% <ø> (ø)
.../src/simcore_service_webserver/statics/settings.py	83.3% <ø> (ø)
...s-library/src/models_library/services_resources.py	86.4% <40.0%> (-4.4%)	⬇️
...simcore_service_webserver/projects/projects_api.py	83.0% <85.7%> (-8.2%)	⬇️
...r-v2/src/simcore_service_director_v2/utils/dask.py	88.8% <86.8%> (-1.0%)	⬇️
...postgres_database/utils_groups_extra_properties.py	95.6% <95.6%> (ø)
...ages/models-library/src/models_library/clusters.py	100.0% <100.0%> (ø)
...base/src/simcore_postgres_database/utils_models.py	100.0% <100.0%> (ø)
...core_service_webserver/projects/_nodes_handlers.py	90.2% <100.0%> (+0.1%)	⬆️
... and 7 more

... and 114 files with indirect coverage changes

[mguidon]

✔️

[pcrespov]

nice job!

[matusdrobuliak66]

Really nice! 👍

[codeclimate]

Code Climate has analyzed commit 0f722e7 and detected 0 issues on this pull request.

View more on Code Climate.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

[mrnicegyu11]

Thanks a lot, I read over it and it looks very promissing :)

If you want feel free to add a DevOps Warning/Tasks to remove the previous service overwrites we had in the DB (for Taylor etc.) once this propagates, if you want

[sanderegg]

Thanks a lot, I read over it and it looks very promissing :)

If you want feel free to add a DevOps Warning/Tasks to remove the previous service overwrites we had in the DB (for Taylor etc.) once this propagates, if you want

done in ITISFoundation/osparc-ops-environments#256