[api] Introduce attrib type pundit policy

src/api/app/policies/attrib_type_policy.rb

@@ -0,0 +1,27 @@
+class AttribTypePolicy < ApplicationPolicy
+  def create?
+    @user.is_admin? || access_to_type? || access_to_namespace?
+  end
+
+  def update?
+    create?
+  end
+
+  def destroy?
+    create?
+  end
+
+  private
+
+  def access_to_type?
+    @record.attrib_type_modifiable_bies.any? do |rule|
+      rule.user == @user || @user.is_in_group?(rule.group)
+    end
+  end
+
+  def access_to_namespace?
+    @record.attrib_namespace.attrib_namespace_modifiable_bies.any? do |rule|
+      rule.user == @user || @user.is_in_group?(rule.group)
+    end
+  end
+end