[AC-1105] allow users with manage groups permission to access collect…

[jlf0dev]

…ions

Type of change

- [x] Bug fix
- [ ] New feature development
- [ ] Tech debt (refactoring, code cleanup, dependency upgrades, etc)
- [ ] Build/deploy pipeline (DevOps)
- [ ] Other

Objective

As a user with the Manage Groups permission, you can access both the Vault and Groups tab in the Admin Console. Those pages both use Collections, but just because you have the Manage Groups permission, doesn't mean you can access those collections used in the page.

This change allows users with the Manage Groups permission to use the collection endpoints. This will not allow them to access all collection, just assigned collections.

Code changes

• file.ext: Description of what was changed and why

Before you submit

• Please check for formatting errors (dotnet format --verify-no-changes) (required)
• If making database changes - make sure you also update Entity Framework queries and/or migrations
• Please add unit tests where it makes sense to do so (encouraged but not required)
• If this change requires a documentation update - notify the documentation team
• If this change has particular deployment requirements - notify the DevOps team

[eliykat]

So "Manage Groups" means you can create, delete and edit groups, but you can't give groups access to collections that you yourself do not have access to. Is that the intention?

If so then LGTM. I am just unsure how custom permissions are supposed to interact so I wanted to make sure.