[spicedb] Grant all org members project "editor" role

[geropl]

Description

Summary generated by Copilot

🤖 Generated by Copilot at 9a1555d

This pull request refactors the project authorization logic to use SpiceDB and permissions instead of relations. It removes the editor relation from the ProjectRelation type and adds it to the ProjectPermission type. It also updates the project settings and tests to reflect the new logic and allow more actions for project members. It modifies the files components/server/src/authorization/definitions.ts, components/server/src/projects/projects-service.spec.db.ts, components/server/src/user/env-var-service.spec.db.ts, and components/spicedb/schema/schema.yaml.

Related Issue(s)

Fixes EXP-608

How to test

• user 1: create an org
• user 2: join with that org (as member)
• user 2: create a project
• user 2: change settings on that project ✔️
• user 2: add/modify/remove env vars on that project ✔️

Documentation

Preview status

Gitpod was successfully deployed to your preview environment.

• 🏷️ Name - gpl-rm-prob4e288aa8b
• 🔗 URL - gpl-rm-prob4e288aa8b.preview.gitpod-dev.com/workspaces.
• 📚 Documentation - See our internal documentation for information on how to interact with your preview environment.
• 📦 Version - gpl-rm-project-editor-gha.17094
• 🗒️ Logs - GCP Logs Explorer

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[geropl]

/unhold