bug: Permission global:edit_default_branch not enforced when loading a schema

[dgarros]

Component

API Server / GraphQL

Infrahub version

1.0.5

Current Behavior

A user with the global permissions to manage the schema (global:manage_schema:allow_all) but without the permission to edit the default branch (global:edit_default_branch) is still able to load a new schema in the default branch (main)

Expected Behavior

A user without the permission global:edit_default_branch shouldn't be able to load a schema into the default branch

Steps to Reproduce

On a fresh system

• Create a new user and add it to the group Infrahub Users
• Validate that the group is associated with the role General Access (default data) and that this role has the global:manage_schema:allow_all but does not have the role global:edit_default_branch
• Generate a token for this user
• Try to load a schema with this user account into the default branch using infrahubctl

Additional Information

No response