feat(users): custom role at profile read

[Riddhiagrawal001]

Type of Change

• Bugfix
• New feature
• Enhancement
• Refactoring
• Dependency updates
• Documentation
• CI/CD

Description

This pr adds the functionality to read custom role at profile level

Additional Changes

• This PR modifies the API contract
• This PR modifies the database schema
• This PR modifies application configuration/environment variables

Motivation and Context

Closes #6488

How did you test it?

1. Create custom role at profile-level
   Request

curl --location 'http://localhost:9000/api/user/role' \
--header 'authorization: Bearer JWT' \
--data '{
    "role_scope": "merchant",
    "groups": [
        "operations_manage",
        "connectors_view"
    ],
    "role_name": "profile-level-custom-role",
    "entity_type":"profile"
}'

Response

{
    "error": {
        "type": "invalid_request",
        "message": "User Role Operation Not Supported",
        "code": "UR_23"
    }
}

2. Older flows should work as before . Changes for create profile custom roles will be in consecutive pr
3. Validate custom role
   If a role with the same name is created either below me or in my lineage , then i wouldn't be able to create the role with that same name
   Request

curl 'http://localhost:9000/api/user/role' \
  -H 'Accept: */*' \
  -H 'authorization: Bearer JWT' \
  --data-raw '{"role_scope":"merchant","groups":["operations_view","operations_manage"],"role_name":"m2-org"}'

Response

{
    "error": {
        "type": "invalid_request",
        "message": "Role name already exists",
        "code": "UR_35"
    }
}

Checklist

• I formatted the code cargo +nightly fmt --all
• I addressed lints thrown by cargo clippy
• I reviewed the submitted code
• I added unit tests for my changes where possible

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
crates/router/src/services/authorization/roles.rs	78% smaller
crates/router/src/db/kafka_store.rs	36% smaller
crates/router/src/core/user_role/role.rs	28% smaller
crates/router/src/utils/user_role.rs	24% smaller
crates/diesel_models/src/query/role.rs	9% smaller
crates/router/src/db/role.rs	7% smaller
crates/common_enums/src/enums.rs	6% smaller
crates/api_models/src/user_role/role.rs	0% smaller
crates/diesel_models/src/role.rs	0% smaller
crates/diesel_models/src/schema.rs	0% smaller
crates/diesel_models/src/schema_v2.rs	0% smaller
crates/router/src/core/user.rs	0% smaller
crates/router/src/core/user_role.rs	0% smaller
migrations/2024-10-17-073555_add-profile-id-to-roles/down.sql	Unsupported file format
migrations/2024-10-17-073555_add-profile-id-to-roles/up.sql	Unsupported file format
migrations/2024-10-17-123943_add-profile-enum-in-role-scope/down.sql	Unsupported file format
migrations/2024-10-17-123943_add-profile-enum-in-role-scope/up.sql	Unsupported file format
migrations/2024-12-18-061400_change-roles-index/down.sql	Unsupported file format
migrations/2024-12-18-061400_change-roles-index/up.sql	Unsupported file format

[racnan]

take these filter out of the match statement. dry!

[racnan]

can organisation_id be passed as a function argument instead of inside the enum.

[ThisIsMani]

We should probably throw error here.

[Riddhiagrawal001]

Will take this up in the next PR