Add mypermissions endpoint

[WilliamBZA]

Adds 2 HTTP endpoints:

1. One that returns all of the user's policy names that they have
2. One that returns a summary of the permissions they have

[ramonsmits]

Will this work when auth is disabled? Will we assume that SP will not invoke this API when auth is disabled?

Instead we would use AllowAnonymous and have fallback logic.

[WilliamBZA]

If auth is disabled this returns 403 and the tab isn't displayed by SP. Why would allowanonymous work here instead? What permissions should we return if there is no authorization?

[ramonsmits]

Maybe use all as that is part of the route?

Suggested change

	public ActionResult<PermissionsDescriptor> GetMyPermissions()
	public ActionResult<PermissionsDescriptor> GetAllPermissions()

[ramonsmits]

What are we returning here? a user Id or display name? Can't we assume sub to always exist and not be null when a user is authenticated?

Suggested change

	User.FindFirst("sub")?.Value ?? User.Identity?.Name ?? "unknown",
	User.FindFirst("sub"),

[ramonsmits]

@WilliamBZA in:

• Audit log for authorization decisions #5520

I added configurable settings for these keys

[WilliamBZA]

Will rebase once that's merged

[ramonsmits]

Do we really need to order server side? Should we always order client side anyway?

Suggested change

	GrantedPermissions().OrderBy(p => p, StringComparer.Ordinal).ToList());
	GrantedPermissions()
	).ToList());