Add node level permissions ECFLOW-1960

[marcosbento]

🌦️ >> Documentation << 🌦️
https://sites.ecmwf.int/docs/dev-section/ecflow/pull-requests/PR-189

[codecov-commenter]

Codecov Report

❌ Patch coverage is 91.16541% with 47 lines in your changes missing coverage. Please review.
✅ Project coverage is 48.70%. Comparing base (905a098) to head (df60070).

Files with missing lines	Patch %	Lines
libs/server/src/ecflow/server/HttpServer.cpp	23.80%	16 Missing ⚠️
libs/base/src/ecflow/base/AuthorisationDetails.hpp	0.00%	7 Missing ⚠️
libs/core/src/ecflow/core/Identity.hpp	68.42%	6 Missing ⚠️
libs/node/src/ecflow/node/Alias.cpp	40.00%	3 Missing ⚠️
libs/node/src/ecflow/node/Ctx.cpp	57.14%	3 Missing ⚠️
...ibs/server/src/ecflow/server/ServerEnvironment.cpp	66.66%	3 Missing ⚠️
libs/base/src/ecflow/base/stc/SSyncCmd.cpp	87.50%	2 Missing ⚠️
.../server/src/ecflow/server/AuthorisationService.cpp	81.81%	2 Missing ⚠️
libs/base/src/ecflow/base/cts/user/CSyncCmd.cpp	75.00%	1 Missing ⚠️
libs/node/src/ecflow/node/Family.cpp	83.33%	1 Missing ⚠️
... and 3 more

Additional details and impacted files

@@             Coverage Diff             @@
##           develop     #189      +/-   ##
===========================================
- Coverage    48.70%   48.70%   -0.01%     
===========================================
  Files         1221     1228       +7     
  Lines        96120    96492     +372     
  Branches     14833    14886      +53     
===========================================
+ Hits         46818    46992     +174     
- Misses       49302    49500     +198     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull Request Overview

This PR implements node-level permissions for the ECflow server system. The changes introduce a comprehensive authentication and authorization framework that enables fine-grained access control based on user permissions defined at different levels in the node hierarchy.

• Replaces legacy authentication methods with a new Identity-based system that supports multiple authentication types (user, custom user, secure user, and task)
• Introduces a permissions system using PERMISSIONS variables that can be defined at server, suite, and node levels with inheritance and override capabilities
• Refactors server environment handling to separate authentication and authorization concerns into dedicated services

Reviewed Changes

Copilot reviewed 144 out of 145 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
libs/server/src/ecflow/server/ServerEnvironment.hpp	Replaces password file handling with AuthenticationService and AuthorisationService
libs/server/src/ecflow/server/TcpBaseServer.cpp	Adds identity extraction and assignment to commands
libs/node/src/ecflow/node/permissions/*	New permissions framework with Allowed, Permission, Permissions, and ActivePermissions classes
libs/core/src/ecflow/core/Identity.hpp	New identity system supporting various user types and authentication methods
libs/base/src/ecflow/base/cts/user/*.cpp	Updates user commands to use new authentication/authorization framework

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}