Limit Delete and Edit of Objects from Grid View Based on Workflow and User Permissions

[cancan101]

These actions in the Grid View should all be controlled based on both the workflow and user permissions:

1. (Bulk) editing of Objects
2. Single deleting of Objects
3. Bulk deleting of Objects

(2) is partially addressed in #671. It currently checks user permission, but not workflow permission
(3) was attempted in #530

CC @kingjia90 @mattamon

For the individual elements, this code runs

admin-ui-classic-bundle/src/EventListener/WorkflowManagementListener.php

Lines 105 to 108 in 19e6014

	$data['userPermissions'] = array_merge(
	isset($data['userPermissions']) ? (array)$data['userPermissions'] : [],
	$placeConfig->getUserPermissions($workflow, $element)
	);

and set the permissions on the userPermissions payload which is used by isAllowed.

[github-actions]

Thanks a lot for reporting the issue. We did not consider the issue as "Pimcore:Priority", "Pimcore:ToDo" or "Pimcore:Backlog", so we're not going to work on that anytime soon. Please create a pull request to fix the issue if this is a bug report. We'll then review it as quickly as possible. If you're interested in contributing a feature, please contact us first here before creating a pull request. We'll then decide whether we'd accept it or not. Thanks for your understanding.