Disable UI starting dataset creating jobs for unprivileged users

[MichaelBuessemeyer]

This PR disables the UI elements allowing the creation of a new dataset as an output of a job for normal unprivileged users.

URL of deployed dev instance (used for testing):

• https://onlyallowprivilegdeuserdatasetcreationjobs.webknossos.xyz/

Steps to test:

• On the dev instance log in as the [email protected] user and try to access UI allowing you to start a job creating a dataset:
• <host-ulr-part>/datasets/upload should now show a 403 error page
  • For this, an improved icon might be preferable that follows wks drawing style
• In tracing view:
  • The "materialize merger mode annotation" button should not be rendered
  • The AI Analysis Button should not be rendered
  • The option "Merge this volume annotation with its fallback layer" of a segmentation layer with fallback data (e.g. l4_sample) should not be rendered

Open question:

• Is there a UI element I missed while scanning the codebase?

TODOs:

• Confirm whether keeping the 403 page is ok
  • Get a better image for the forbidden page

Issues:

• fixes #7734

---

(Please delete unneeded items, merge only when none are left open)

• Updated changelog

[MichaelBuessemeyer]

I formatted this page with prettier, as biome currently does not support formatting css.

See: biomejs/biome#1285

[philippotto]

Beautiful :) See my one comment, though, as this should be added to lots of other routes, too, as far as I see.

[philippotto]

I think, this prop can be added to a few other components:

path="/users/:userId/details"
path="/users"
path="/teams"
path="/timetracking"
path="/reports/projectProgress"
path="/reports/availableTasks"
path="/tasks"
path="/tasks/create"
path="/tasks/:taskId/edit"
path="/tasks/:taskId"
path="/projects"
path="/projects/create"
path="/projects/:projectId/tasks"
path="/projects/:projectId/edit"
path="/datasets/:organizationName/:datasetName/import"
path="/datasets/:organizationName/:datasetName/edit"
path="/taskTypes"
path="/taskTypes/create"
path="/taskTypes/:taskTypeId/edit"
path="/taskTypes/:taskTypeId/tasks"
path="/taskTypes/:taskTypeId/projects"
path="/scripts/create"
path="/scripts/:scriptId/edit"
path="/scripts"

[MichaelBuessemeyer]

Thanks for listing all other components 👍

Initially, I though that this should be added in a separate PR but doing it already here is also fine to me and might also save some time.

I'll test each route as admin and non-admin later :)

[MichaelBuessemeyer]

I'll test each route as admin and non-admin later :)

Done, worked out as expected 👍. All pages/view listed above are available to [email protected] but not to [email protected]

[philippotto]

Excellente 🥖