LUT-31765 : Update technical admin right level for deleting questions

[antoinefuzier]

No description provided.

[lobtx]

I think we should elaborate a bit on that solution cause it's hard coding, and hard coding is bad (most of the time).

I see two options:

• do not check level at all and just rely on RBAC
• check level, but smart, tracking the user level used to create the form, and check against it. This is relevant only if checking the admin level is really needed.

The second option could be covered by adding an creation_level column in forms_form, and managing it in the code:

if ( adminUser != null && adminUser.getUserLevel( ) > form.getCreationLevel( ) )
        {
        	return redirect( request, AdminMessageService.getMessageUrl( request, WARNING_INSUFFICIENT_RIGHTS_LEVEL_TO_DELETE_COMPOSITE, AdminMessage.TYPE_STOP ) );
        }

instead of current

if ( adminUser != null && adminUser.getUserLevel( ) != TECHNICAL_ADMIN_RIGHT_LEVEL )
        {
        	return redirect( request, AdminMessageService.getMessageUrl( request, WARNING_INSUFFICIENT_RIGHTS_LEVEL_TO_DELETE_COMPOSITE, AdminMessage.TYPE_STOP ) );
        }