DIG-1189: Authz user can view datasets

[daisieh]

If the user token is the same in both the Bearer token and in the body of the request, and that token is valid, you should be able to get the user's authorized datasets.

## opa datasets
curl -X "POST" "http://candig.docker.internal:5080/policy/v1/data/permissions/datasets" \
     -H 'Authorization: Bearer <user token>' \
     -H 'Content-Type: application/json' \
     -H 'Accept: application/json' \
     -d $'{
  "input": {
    "token": "<same user token>",
    "body": {
      "path": "/v2/authorized/sample_registrations/",
      "method": "GET"
    }
  }
}'

should give you the user's authorized datasets. If you try to use different tokens, e.g. Bearer token is for user2, and the requested input token is for site_admin, it should fail.

[OrdiNeu]

Works as expected 👍
Note that if a dataset somehow doesn't exist in OPA, Katsu will disallow the request even if you are site admin (is Katsu comparing to a list of allowed datasets?)

[daisieh]

Yes, because the list of allowed programs that Katsu is getting is based on the programs that Opa knows about. I think that this is probably a good behavior because it will enforce the need to add program authorizations before ingesting any data.