Pulp

Add Support for roles in RBAC

• Add role models and role permission backend
• Add support for roles in the access policy
• Rename permission_assignment to creation_hooks
• Make queryset filtering depend on the backend configuration
• Add register for creation hooks
• Add post migrate hook to manage locked roles defined by viewsets
• Add rest interface for roles
• Add endpoint for user roles and group roles
• Refactor get_{users,groups}_with_perms for roles
• Avoid circular imports with custom user model Custom user models may rely on importing pulpcore.app.models.

fixes #9413 fixes #9411

Fix return value of get_all_permissions

Django's interface for get_all_permissions seems to not include the app_label in the permission strings if an obj is provided. We include them again in the my_permission endpoint, because that is the way we represent them to our users everywhere.

https://docs.djangoproject.com/en/3.2/ref/contrib/auth/#django.contrib.auth.models.User.get_all_permissions

re #9411