Institution Read-Only User Type PART 2 (UI)

[Joshua-Lakusta]

User Story
As an institution user I need to be able to add users that have read only access. Introduce a new user role for all institution accounts which permits read-only capabilities.

Institution stakeholders - in particular BC Public schools - have emphasized that they have large FAO offices with numerous staff, many of whom perform strictly 'advisory' roles to the student, and are not authorized to make any changes which affect a student's application or the school's list of programs and offerings. Given the risks with taking such action, they would prefer the ability to assign a 'read-only' ability to any given user.

Acceptance Criteria:

• Add a new user role called 'read-only' located between user and no access
• Update the UI to prevent the actions long the below areas.
  • Prevent user from changing any offering related data
  • 'Complete Program Info Request' button
  • 'Application Action' drop down button on the 'Confirm Enrolment' screen of a particular application
  • 'Submit update' button on the 'report a change' screen of a particular application
  • 'Submit requested change' button on the 'Request an application change' screen of a particular application

• Adjust the "Add Users" screen to describe the 'read-only' role

Technical

• API: Update API to receive the read-only type for Ministry and Institutions.
• UI: Add read-only option in Edit User Screen.
  • Ensure buttons are disabled across all mentioned areas in the business ACs.
  • Ensure routes are disallowed if the entire page should not be accessed. For instance, if there is a page dedicated for program creations, it may be completely blocked from the router InstitutionRoutes.
• E2E Tests
  • API E2E test(s) for adding read-only user.

Context:
Institution users currently have two user types: Admin and User. The user type with the most limited capabilities - a User - still has the ability to add programs and offerings to a particular location within the school, and to make actions to a particular student's account - PIR, COE and Scholastic Standing.