Onboards to centralized resource access control mechanism for ml-model-group

[DarshitChanpura]

Description

Implements resource-access-control for ML-Model-Group.

Related Issues

• Resolves Onboard ML plugin to Centralized Resource AuthZ framework #3890

Check List

• New functionality includes testing.
• New functionality has been documented.
• API changes companion pull request created.
• Commits are signed per the DCO using --signoff.
• Public documentation issue/PR created.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[dhrubo-os]

Apply spotless: ./gradlew spotlessApply

[dhrubo-os]

Integ tests are failing.

[DarshitChanpura]

As a follow-up, security will add a mechanism to update code path based on whether resource is marked for protection. A PR will follow soon.

ResourceSharingClientAccessor.getInstance().getResourceSharingClient() != null

will be expanded to :

ResourceSharingClient client = ResourceSharingClientAccessor.getInstance().getResourceSharingClient();

client != null && client.isFeatureEnabledForType(ML_RESOURCE_TYPE)

this will expand on existing setting to enable/disable types
so no individual flag needed, but still can be disabled for individual types and fallback to modelAccessControl

the follow-up PR will make it more clear