Add method to determine if operation under k8s resource is permitted

[AndrienkoAleksandr]

Can be useful for:
#166

Add method to determine if operation under k8s resource is permitted

Example how we can used it:

func checkGetOpenshiftUsersPermission(cr *orgv1.CheCluster) error {
	getUsersResAttr := &authorizationv1.ResourceAttributes{
			Namespace: cr.Namespace,
			Verb: "get",
			Group: "user.openshift.io",
			Resource: "user",
	}
	ok, err := k8sclient.IsResourceOperationPermitted(getUsersResAttr);
	if  err != nil {
		return fmt.Errorf("fail to check permissions to get Openshift cluster users.")
	}

	if !ok {
		return fmt.Errorf("not enougth permissions to get Openshift cluster users.")
	}

	return nil
}

Signed-off-by: Oleksandr Andriienko [email protected]

[AndrienkoAleksandr]

@davidfestal we had some discussion #166 (comment)

@davidfestal some ideas about providing several levels of permissions to the che operator (according to the installation context) ,and let the operator logic accommodate these differences to enable or disable some installation options.

What do you think method from current pr will be enough to determine permission and complete #166 ?

[AndrienkoAleksandr]

This code was merged in the frame of the another pr #166, so I close it.