Add readonly view to role management

[thomheymann]

Resolves #141801

Summary

Hides CTAs and disables input fields on role management screens in readonly mode.

Screenshot

Testing

1. Create a user with viewer role, kibana_admin role and read_security privileges
2. Login as that user and navigate to Stack Management > Roles

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)

[jeramysoucy]

@thomheymann The only way I have found to give users access to view the Kibana privileges section of the role screen is to grant a blanket of 'All' Kibana privileges to the user. If I manually enable all Kibana privileges, one-by-one, the user still cannot access a read-only view of Kibana privileges in the role screen.

@legrego Thom tracked the logic to the uiCapabilities.spaces.manage property, which appears to come from application.capabilities.spaces.manage. We thought you may have some insight into how this is getting set.

[jeramysoucy]

@thomheymann The only way I have found to give users access to view the Kibana privileges section of the role screen is to grant a blanket of 'All' Kibana privileges to the user. If I manually enable all Kibana privileges, one-by-one, the user still cannot access a read-only view of Kibana privileges in the role screen.

@legrego Thom tracked the logic to the uiCapabilities.spaces.manage property, which appears to come from application.capabilities.spaces.manage. We thought you may have some insight into how this is getting set.

Ok. Looks like this is exactly expected. There's an open issue to make this an explicit privilege in the future. Thanks @legrego!

[jeramysoucy]

Looks great! Clean implementation and seems to leverage existing patterns/utilities/naming conventions.

[kibana-ci]

💚 Build Succeeded

• Buildkite Build
• Commit: e1d8c44

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
security	537.8KB	538.3KB	+505.0B

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id	before	after	diff
security	57.4KB	57.7KB	+316.0B

Unknown metric groups

ESLint disabled in files

id	before	after	diff
osquery	1	2	+1

ESLint disabled line counts

id	before	after	diff
enterpriseSearch	19	21	+2
fleet	57	63	+6
osquery	103	108	+5
security	23	24	+1
securitySolution	439	443	+4
total			+18

Total ESLint disabled count

id	before	after	diff
enterpriseSearch	20	22	+2
fleet	65	71	+6
osquery	104	110	+6
security	25	26	+1
securitySolution	516	520	+4
total			+19

History

• 💚 Build #82298 succeeded a7268b8

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream