Introduce granulated Media Gallery ACL resources and enforce for new media gallery

[sivaschenko]

Story #1485

Description

Use Magento_MediaGallery::media_gallery ACL resource instead of Magento_Cms::media_gallery
The Magento_MediaGallery::media_gallery ACL resource should have the following subresources:
** Upload assets
** Delete assets
** Insert assets into the content
** Create folder
** Delete folder

The resources should be added to app/code/Magento/MediaGallery/etc/acl.xml file in magneto2 repo
The introduced ACL resources should be enforced for the new media gallery (Enhanced Media Gallery is enabled)
The ACL resources should affect if corresponding buttons/components are displayed to the user and if the controllers/services accept the actions

[m2-assistant]

Hi @sivaschenko. Thank you for your report.
To help us process this issue please make sure that you provided sufficient information.

Please, add a comment to assign the issue: @magento I am working on this

---

• Join Magento Community Engineering Slack and ask your questions in #github channel.

[tuyennn]

Got this issue on several projects

Unable to apply data patch Magento\MediaGalleryUi\Setup\Patch\Data\AddMediaGalleryPermissions for module Magento_MediaGalleryUi. Original exception message: SQLSTATE[23000]: Integrity constraint violation: 1452 Cannot add or update a child row: a foreign key constraint fails (xxxxx.authorization_rule, CONSTRAINT AUTHORIZATION_RULE_ROLE_ID_AUTHORIZATION_ROLE_ROLE_ID FOREIGN KEY (role_id) REFERENCES authorization_role (role_id) ON DELETE CASCADE), query was: INSERT  INTO authorization_rule (role_id,resource_id,permission) VALUES (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?), (?, ?, ?)

The setup cannot pass, until this patch was applied