PSP-10994 Restrict Contractor lease access to lease team/project team

[asanchezr]

Create lease restriction

Update lease restriction

[github-actions]

See CodeCov Report Here: https://app.codecov.io/github/bcgov/psp/pull/5184

[github-actions]

See CodeCov Report Here: https://app.codecov.io/github/bcgov/psp/pull/5184

[sonarqubecloud]

Quality Gate passed

Issues
3 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

See CodeCov Report Here: https://app.codecov.io/github/bcgov/psp/pull/5184

[devinleighsmith]

@asanchezr please address codeQl warnings if relevant.

Also, seeing some behaviour on lease creation that may not be consistent with acquisition.

1. Make current user a contractor, remove northern region.
2. Click on new property from northern region.
3. Create a lease from that property. Enter all required fields but do not enter region. Save
4. Backend throws "User is not assigned to the Lease File's region". Debugging shows that northern region sent to backend even though region field in UI appears blank.

[asanchezr]

@asanchezr please address codeQl warnings if relevant.

Also, seeing some behaviour on lease creation that may not be consistent with acquisition.

1. Make current user a contractor, remove northern region.
2. Click on new property from northern region.
3. Create a lease from that property. Enter all required fields but do not enter region. Save
4. Backend throws "User is not assigned to the Lease File's region". Debugging shows that northern region sent to backend even though region field in UI appears blank.

@devinleighsmith - The codeql warnings seem weird but will take a look (most are on test files)

The behaviour you see with property region assigned to file region I can see it already existing in DEV (so not related to this changes). Both Leases and Acquisition will send the northern region on the file submission if the first property added is in northern region - regardless of whether user is contractor/staff and regardless of user region access. This seems like an existing bug. If you agree I will ask Praveen to validate and create a bug ticket and we can fix that separate from this PR. Sounds good?

This is the error I get as a staff (not contractor) creating an acquisition file when I don't have access to northern region