[GSK-1438] Invited users can't upload artifacts to a project

[henchaves]

Description

This PR aims to fix a bug, when a guest user has the AI CREATOR role can't upload artifacts to the project.

Related Issue

GSK-1438 (available on Linear)

Type of Change

• 📚 Examples / docs / tutorials / dependencies update
• 🔧 Bug fix (non-breaking change which fixes an issue)
• 🥂 Improvement (non-breaking change which improves an existing feature)
• 🚀 New feature (non-breaking change which adds functionality)
• 💥 Breaking change (fix or feature that would cause existing functionality to change)
• 🔐 Security fix

[linear]

GSK-1438 Invited users can't upload datasets to a project

Currently we run this validation when uploading artifacts to a project:

ai.giskard.security.PermissionEvaluator#canWriteProjectKey

for example:

ai.giskard.web.rest.controllers.UploadController#uploadArtifact

We should also check that if a person is invited to a project he can also write to it

[kevinmessiaen]

Looks good however we also have a method called canWriteProject which doesn't replicate the same logic as in canWriteProjectKey.

Ideally we should have a method canWriteProject(Project project) that is called by both canWriteProject(Long id) and canWriteProjectKey.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

50.0% Coverage
0.0% Duplication