Unified the code which renders the table of vulnerabilities (#2835)

### What's done:
- added `vulnerabilityTableComponent` which renders the table of vulnerabilities on `VulnerabilityCollection`, `UserProfile` and `Organization` pages.
- reworked `vulnerabilityCollectionView`, deleted `renderVulnerabilityTableForProfileView` and `organizationVulnerabilitiesTab`.
- added many visual improvements to the table of vulnerabilities.
- added support for displaying only `APPROVED` and `AUTO_APPROVED` vulnerabilities depending on whether the user is logged in and his role.
- fixed bug that prevented regular (non-admin) user from seeing another user's vulnerabilities.
- fixed bug related to highlighting `Users` tab when switching to it on `UserProfile` page.

It's part of #2643
Closes #2746

Author: DrAlexD

save-backend/src/main/kotlin/com/saveourtool/save/backend/controllers/vulnerability/VulnerabilityController.kt

@@ -1,6 +1,8 @@
 package com.saveourtool.save.backend.controllers.vulnerability
 
+import com.saveourtool.save.authservice.utils.username
 import com.saveourtool.save.backend.security.VulnerabilityPermissionEvaluator
+import com.saveourtool.save.backend.service.LnkUserOrganizationService
 import com.saveourtool.save.backend.service.vulnerability.VulnerabilityService
 import com.saveourtool.save.backend.utils.hasRole
 import com.saveourtool.save.configs.ApiSwaggerSupport
@@ -46,6 +48,7 @@ class VulnerabilityController(
     private val vulnerabilityService: VulnerabilityService,
     private val vulnerabilityPermissionEvaluator: VulnerabilityPermissionEvaluator,
     private val cosvService: CosvService,
+    private val lnkUserOrganizationService: LnkUserOrganizationService,
 ) {
     @PostMapping("/by-filter")
     @Operation(
@@ -83,13 +86,25 @@ class VulnerabilityController(
         filter: VulnerabilityFilter,
         authentication: Authentication?,
     ) {
-        if (
-            // if user is not authenticated, he will have authentication = null and will not get other's submitted vulnerabilities
-            (filter.statuses?.contains(VulnerabilityStatus.APPROVED) != true || filter.statuses?.contains(VulnerabilityStatus.AUTO_APPROVED) != true) &&
-                    authentication?.name != filter.authorName &&
-                    // only if user is NOT admin, if admin - everything is fine
-                    authentication?.hasRole(Role.SUPER_ADMIN) == false
-        ) {
+        /* Everyone has permission to public vulnerabilities (that have status APPROVED or AUTO_APPROVED), also permission have:
+           1) super admins to all vulnerabilities;
+           2) users to their vulnerabilities;
+           3) users to organization vulnerabilities in which they have ADMIN role or higher; */
+        val isPublicVulnerabilities = filter.statuses?.isNotEmpty() == true &&
+                filter.statuses?.all { it in listOf(VulnerabilityStatus.APPROVED, VulnerabilityStatus.AUTO_APPROVED) } == true
+
+        if (!isPublicVulnerabilities && authentication != null) {
+            val isSuperAdmin = authentication.hasRole(Role.SUPER_ADMIN)
+            val isOwner = filter.authorName?.let { it == authentication.username() } ?: false
+            val roleInOrganization = filter.organizationName?.let { lnkUserOrganizationService.getGlobalRoleOrOrganizationRole(authentication, it) }
+            val isAdminInOrganization = roleInOrganization?.isHigherOrEqualThan(Role.ADMIN) ?: false
+
+            val isHasAdditionalRights = isSuperAdmin || isOwner || isAdminInOrganization
+
+            if (!isHasAdditionalRights) {
+                throw ResponseStatusException(HttpStatus.FORBIDDEN)
+            }
+        } else if (!isPublicVulnerabilities) {
             throw ResponseStatusException(HttpStatus.FORBIDDEN)
         }
     }

save-cloud-common/src/commonMain/kotlin/com/saveourtool/save/entities/vulnerability/VulnerabilityStatus.kt

@@ -5,34 +5,36 @@ import kotlinx.serialization.Serializable
 
 /**
  * A value for vulnerability statuses.
+ *
+ * @property value
  */
 @Serializable
 @JsExport
 @Suppress("IDENTIFIER_LENGTH")
-enum class VulnerabilityStatus {
+enum class VulnerabilityStatus(val value: String) {
     /**
      * Approve status
      */
-    APPROVED,
+    APPROVED("Approved"),
 
     /**
      * Automatically approved by batch-upload
      */
-    AUTO_APPROVED,
+    AUTO_APPROVED("Auto-approved"),
 
     /**
      * Created status
      */
-    CREATED,
+    CREATED("Created"),
 
     /**
      * Review status
      */
-    PENDING_REVIEW,
+    PENDING_REVIEW("Pending review"),
 
     /**
      * Reject status
      */
-    REJECTED,
+    REJECTED("Rejected"),
     ;
 }

save-cloud-common/src/commonMain/kotlin/com/saveourtool/save/filters/VulnerabilityFilter.kt

@@ -17,8 +17,8 @@ import kotlinx.serialization.Serializable
  */
 @Serializable
 data class VulnerabilityFilter(
-    val identifierPrefix: String,
-    val statuses: List<VulnerabilityStatus>?,
+    val identifierPrefix: String = "",
+    val statuses: List<VulnerabilityStatus>? = null,
     val isOwner: Boolean = false,
     val tags: Set<String> = emptySet(),
     val minCriticality: Float = 0.0f,
@@ -28,6 +28,8 @@ data class VulnerabilityFilter(
     val organizationName: String? = null,
 ) {
     companion object {
-        val approved = VulnerabilityFilter("", statuses = listOf(VulnerabilityStatus.APPROVED, VulnerabilityStatus.AUTO_APPROVED))
+        val empty = VulnerabilityFilter()
+        val approved = VulnerabilityFilter(statuses = listOf(VulnerabilityStatus.APPROVED, VulnerabilityStatus.AUTO_APPROVED))
+        val pendingApproval = VulnerabilityFilter(statuses = listOf(VulnerabilityStatus.CREATED, VulnerabilityStatus.PENDING_REVIEW))
     }
 }

save-frontend/src/main/kotlin/com/saveourtool/save/frontend/components/basic/organizations/OrganizationVulnerabilitiesTab.kt

@@ -1,4 +1,4 @@
-@file:Suppress("HEADER_MISSING_IN_NON_SINGLE_CLASS_FILE", "FILE_NAME_MATCH_CLASS")
+@file:Suppress("FILE_NAME_MATCH_CLASS")
 
 package com.saveourtool.save.frontend.components.basic.table.filters
 
@@ -60,7 +60,7 @@ val vulnerabilitiesFiltersRow: FC<VulnerabilitiesFiltersProps> = FC { props ->
                                     type = InputType.text
                                     className = ClassName("form-control")
                                     value = filter.identifierPrefix
-                                    placeholder = "${"Name".t()}..."
+                                    placeholder = "${"Identifier".t()}..."
                                     required = false
                                     onChange = { event ->
                                         setFilter { oldFilter ->
@@ -71,7 +71,7 @@ val vulnerabilitiesFiltersRow: FC<VulnerabilitiesFiltersProps> = FC { props ->
                             }
 
                             div {
-                                className = ClassName("col-4 px-1")
+                                className = ClassName("d-flex col-4 px-1 justify-content-center")
                                 multiRangeSlider {
                                     min = 0.0f
                                     max = 10.0f
@@ -83,7 +83,7 @@ val vulnerabilitiesFiltersRow: FC<VulnerabilitiesFiltersProps> = FC { props ->
                                     ruler = false
                                     label = false
                                     style = jso {
-                                        width = 16.4.rem
+                                        width = 16.rem
                                         height = 0.rem
                                         border = "none".unsafeCast<Border>()
                                         boxShadow = "none".unsafeCast<BoxShadow>()

save-frontend/src/main/kotlin/com/saveourtool/save/frontend/components/basic/table/filters/VulnerabilitiesFiltersRow.kt

@@ -2,7 +2,7 @@
  * Utilities for react-tables
  */
 
-@file:Suppress("FILE_NAME_MATCH_CLASS", "MatchingDeclarationName")
+@file:Suppress("FILE_NAME_MATCH_CLASS")
 
 package com.saveourtool.save.frontend.components.tables
 
@@ -56,6 +56,8 @@ import kotlinx.coroutines.isActive
 import kotlinx.coroutines.launch
 
 const val TABLE_HEADERS_LOCALE_NAMESPACE = "table-headers"
+const val INITIAL_TABLE_PAGE_SIZE = 10
+const val VULNERABILITIES_COLLECTION_TABLE_PAGE_SIZE = 7
 
 private typealias TableHeaderBuilder<T> = (ChildrenBuilder, Table<T>, NavigateFunction) -> Unit
 
@@ -124,7 +126,7 @@ external interface TableProps<D : Any> : Props {
 )
 fun <D : RowData, P : TableProps<D>> tableComponent(
     columns: (P) -> Array<out ColumnDef<D, *>>,
-    initialPageSize: Int = 10,
+    initialPageSize: Int = INITIAL_TABLE_PAGE_SIZE,
     useServerPaging: Boolean = false,
     isTransparentGrid: Boolean = false,
     @Suppress("EMPTY_BLOCK_STRUCTURE_ERROR") tableOptionsCustomizer: ChildrenBuilder.(TableOptions<D>) -> Unit = {},
@@ -261,7 +263,7 @@ fun <D : RowData, P : TableProps<D>> tableComponent(
                                 headerGroup.headers.map { header: Header<D, out Any?> ->
                                     val column = header.column
                                     th {
-                                        this.className = className
+                                        className = ClassName("m-0 font-weight-bold text-center text-nowrap")
                                         +renderHeader(header)
                                         if (column.getCanSort()) {
                                             style = style ?: jso()