Afford Submission visibility settings per Group

[bickelj]

Administrators can see "Related submissions" on a Submissions Details page. This change allows a Wagtail administrator to add visibility to any Group such that members of the Group can also see "Related submissions." This change embraces Django Group and Wagtail Setting Models such that the settings can be made within the application.

A Wagtail administrator can add visibility from the admin interface via Settings -> Submission Details Page Settings. To grant visibility, the administrator checks the "Sees related submissions" box for the Group specified in the Group dropdown. To revoke visibility, the administrator unchecks the same. However, if a user is a member of any group that has been granted visibility, the user will have visibility.

Fixes #3958

Test Steps

Using the sandbox database.

• Log in as Reviewer
• Go to submission 2 (apply/submissions/2/)
• Verify that the "Related submissions" box is not present.
• Log in as Admin
• Go to submission 2
• Verify that the "Related submissions" box is present.
• Go to Wagtail admin (/admin)
• Go to "Settings" -> "Submissions Details Page Settings" (admin/settings/apply_utils/submissionsdetailssetting/)
• Add a row for "Contracting" and check the "Sees related submissions box."
• Log in as Reviewer again
• Go to submission 2 again
• Verify that the "Related submissions" box is present.

[bickelj]

It's not clear why these tests failed or stopped. I just ran pytest locally on this branch and they passed.

Edit: oh, I see it. Fixed and pushed.

[bickelj]

@theskumar Is there anything else we need to do on this one?

[theskumar]

@bickelj Looks like you got a merge conflict.

[bickelj]

@frjo If wagtail admin only affects wagtail admin, does that mean wagtail admin is superfluous since it doesn't affect the rest of the app? I'm trying to understand the goal of the boundaries around wagtail admin. I would guess that this PR does not match your expectation for use of wagtail admin. But I still think it is useful for wagtail administrators (as opposed to developers or system administrators) to be able to set up some permissions and visibility somewhere. Until that somewhere exists, wouldn't it be good to have this?

[frjo]

In Wagtail admin you create funds/labs/forms, make settings etc. Wagtail admin permissions control who can make these things.

Hypha permissions control who can create/edit/view/review submissions/projects/invoices/reports etc.

This PR contains a specific permission, for a specific block on a specific view. A narrow usecase I think.