New permissions in the transformation system

[chrisburr]

In #7113 access to TransformationClient.getTransformation was restricted however access to TransformationClient.getTransformations was not.

Though in the actual method, it seems at a glance that getTransformation is just an wrapper around getTransformations so it's not clear to me why they wouldn't be treated the same way:

DIRAC/src/DIRAC/TransformationSystem/DB/TransformationDB.py

Lines 318 to 327 in df6a89f

	def getTransformation(self, transName, extraParams=False, connection=False):
	"""Get Transformation definition and parameters of Transformation identified by TransformationID"""
	res = self._getConnectionTransID(connection, transName)
	if not res["OK"]:
	return res
	connection = res["Value"]["Connection"]
	transID = res["Value"]["TransformationID"]
	res = self.getTransformations(
	condDict={"TransformationID": transID}, extraParams=extraParams, connection=connection
	)

It's the same for getTransformationParameters.

The WebApp also now silently fails due to accessing these methods as well as getTransformationStats, getTransformationFilesCount and potentially more.

I guess more importantly the original PR stated:

we decided that we'll be fine with people seeing other transformations - just not modifying them.

but in practice the change restricts large parts of the "seeing other transfromations". This is somewhat pressing as LHCbDIRAC extensively relies on users having read access to all transformations.

[marianne013]

Tagging @sfayer
We'll have a look.

[marianne013]

@chrisburr What permissions (of any) do these users have ?

[chaen]

They have

      Properties = NormalUser
      Properties += PrivateLimitedDelegation