feat: control tabel/view currentuser insert, update,delete rights

[jyritali]

Closes #3684

feature: control tabel/view currentuser insert, update,delete rights.
add to PostgREST - user tabel and view rights control and show methods reagarding user rights, not table or view one

[jyritali]

Please merge these commits to one commit

[laurenceisla]

I remember tackling this in PR #1824, we had the following discussion there: #1824 (comment)

In summary, the HTTP methods returned by OPTIONS show what CAN be done to the table/view, not the privileges granted to them.

postgrest/src/PostgREST/SchemaCache/Table.hs

Lines 30 to 33 in 6c7963c

	-- The following fields identify what can be done on the table/view, they're not related to the privileges granted to it
	, tableInsertable :: Bool
	, tableUpdatable :: Bool
	, tableDeletable :: Bool

This may be different for OpenAPI though, but we didn't follow up with it because we were in the plans of removing it from the core repo.

All in all, thanks for the initiative, but these changes are not compatible with what we agreed in the PR I mentioned.

[wolfgangwalther]

I remember tackling this in PR #1824, we had the following discussion there: #1824 (comment)

Right, note specifically this comment by Steve where he makes the distinction between "allowed" and "valid". OPTIONS is about "valid", so we're not going to do the change proposed in this PR here.