Enabling User File Access Sharing

[Jiyang-Wu]

Share File

Implemented the feature of UserFile Access Sharing

• UserFile now has a AccessEntry associated with it. The corresponding MySQL table is user_file_access.
• UserFile has two accessLevels, Read and Write. It also has a special Owner accessLevel, which can be treated as Write.
  • Read access can execute the file.
  • Write access can additionally delete the file.
  • Owner of the file can decide to share the workflow to another user, with either Read or Write access.

Shared File Execution

• Shared File are being uniquely identified as {OwnerName}/{FileName}, across the dashboard and workspace.

• Shared file can be executed in the workflow, the actual file path is resolved from database.

UI Update

This PR also includes some frontend UI changes:

• Now shows access entries as badges.

• Now shows
  • an icon
    to indicate ownership
  • and another icon
    to indicate being shared.

[Yicong-Huang]

Please change as we discussed. Thanks.

[Jiyang-Wu]

The "owner" badge is accomplished in two different ways, both have pros and cons:

-- for workflow ownership badge, I created a new endpoint called "getOwner", when the modal is opened, the front end sends a request to that endpoint and reads the response value to indicate the owner. The advantage of this method is that it does not interfere the current data transmission and get things confusing--the grantedList and ownership are gained independently.

-- for file ownership badge, I modified the current endpoint for getGrantedList, in the backend, it now marks the owner as "owner" in the returned json. In front-end, the owner's record gets picked up from the json object and other records will be used as the list of accesses. The advantage of this approach is that it does not send extra requests and it would be easy to modify the backend if similar features are introduced in the future.

If you think any of these two approaches is more suitable for the project, please tell me so I can modify the other one.

[Yicong-Huang]

I've tested your PR all look good. I see two issues:

1. icon/badge location needs better design. in #1269 I have changed everything to ng-zorro and will be easier to add icons/badges to desired position. Given that this change is much larger, I suggest we merge #1269 before your PR.
2. when I share a file's read access to another, the shared account can delete the shared file. This should be prohibited. In short, make sure we check the session user has write access to delete any file.

[Yicong-Huang]

LGTM now.