Make event ACL editable via Tobira

[owi92]

This will allow users to update event ACL in Opencast via Tobira. Doing so will trigger the republish-metadata workflow, so the changes will be propagated to all publications.

Closes #1264
_{can be reviewed commit by commit}

[oas777]

It TRIGGERS the republish-metadata workflow? Automatically? No additional action needed? Thank you!

[owi92]

Yes, correct. Though that might still fail, or take some time.
To reflect the changes in Tobira immediately, it will also be written to our DB, without having to wait for the workflow and the following sync... but that's getting into technicalities.

So tldr: In a perfect world, there's no additional action needed ;)

[oas777]

Ole, is https://pr1272.tobira.opencast.org/ still the deployment I should be looking at? If so, I have two minor (!) remarks:

• The confirmation for having saved my changes by greying out the buttons "Reset" and "Save" is very low-key because it's grey to start with - shouldn't it be blueish, then grey out? Cf.

• Shouldn't the symbol for "Access policy" have a checkmark inside the shield?

[owi92]

is https://pr1272.tobira.opencast.org/ still the deployment I should be looking at

Yes. Thank you for the feedback, I think these are good points. Will change accordingly.

[LukasKalbertodt]

Nice, this will add a big and long awaited feature! Just a bunch of notes, as far as I remember all should be pretty easy to fix.

[LukasKalbertodt]

Reviewed the changes, did not yet test again. It also sounded like you still want to comment in the preview role stuff, so i expect I will do another short review round anyway.

[owi92]

I addressed your latest comments. Regarding preview_roles stuff:
I mixed some things up when I said I wanted to comment them in. They still need to be commented out in event.rs where it would get written to the DB, since the frontend is not sending them yet (same with custom roles). Once frontend sends the complete ACL, the commented out code there can and should get activated.

What I did do, now that preview_roles are a column in the events table: I added them to the request to Opencast, so they won't get overwritten when the event is synced with updated ACLs (custom roles were already included). That is done in update_event_acl in client.rs.

If you want to test this locally, to see if preview and custom roles will stick around:

• use a synced video from your local Opencast
• update the ACL in your Tobira DB with:

update all_events
set custom_action_roles = '{"focus": ["ROLE_USER_ADMIN", "ROLE_USER_SABINE"], "durdle": ["ROLE_USER_ADMIN"]}', 
preview_roles = '{ROLE_ANONYMOUS}'                                                                       
where title = 'event';

• then use the ACL editor to do some changes to read/write roles
• after the metadata has been automatically republished and synced in Tobira, check if the preview and custom roles are still there

[LukasKalbertodt]

Just a thing, but I also still need to think about the unresolved comments from my first review.

[github-actions]

🚨🚨🚨 This PR changes APIs used by the Opencast Admin UI integration 🚨🚨🚨

Detected the following changes (1) between schemas:

✔  Field Realm.nameSource description changed from The raw information about the name of the realm, showing where the name
is coming from and if there is no name, why that is. Can be `null` only for the
root realm, must be non-null for all other realms. to The raw information about the name of the realm, showing where the name
is coming from and if there is no name, why that is. Is `null` for the
root realm, non-null for all other realms.