Spike - RBAC AuthZ - review content tagging legacy permissions (taxonomies)

[rodmgwgu]

Related PR and discussion: #38173

The has_view_object_tags_access method in openedx/core/djangoapps/content_tagging/auth.py is used for validating permissions on tag exporting for courses.

However, this method not only takes into account permissions for courses, but also for other kind of objects.

As part of the AuthZ for Course Authoring project, a new check for authz permissions on courses was added, however the legacy permission check was kept as a fallback for non-course objects.

We should revisit this to fully understand this method use cases and identify next steps.

[MaferMazu]

We opened openedx/frontend-app-admin-console#157 to solve openedx/openedx-authz#309. We won't have the manage taxonomy permission in the UI in Verawood, but we still have the definitions in the backend.
I know @gviedma-aulasneo wanted to look into this further. After that, we'll need to edit the openedx-authz to reflect those changes and also add the enforcement points where needed.