Add security policy to block endpoints

[MarceloRGonc]

Fixes OPS-3879.

[linear]

OPS-3879 Apply security policy to block endpoints

[Copilot]

Pull request overview

Adds route-level security policy metadata for select “block” endpoints to better describe authenticated/project-scoped access (Fixes OPS-3879).

Changes:

• Add project-scoped route security policies to community block install and base blocks endpoints.
• Add project-scoped route security policy (with READ_FLOW) to block variable execution endpoint.
• Introduce Permission usage where relevant to express required access in the route policy.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
packages/server/api/src/app/blocks/community-block-module.ts	Adds project-scoped security policy metadata to the community block install endpoint.
packages/server/api/src/app/blocks/base-block-module.ts	Adds project-scoped security policy metadata to blocks/options and blocks delete endpoints (one endpoint needs a runtime principal restriction fix).
packages/server/api/src/app/block-variable/block-variable-module.ts	Adds project-scoped security policy metadata (incl. READ_FLOW) to execute-variable endpoint.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud