feat: Add ability to configure guest permissions (#10708)

* Configure guest permissions

Signed-off-by: Artem Savchenko <armisav@gmail.com>

* Fix permission domain

Signed-off-by: Artem Savchenko <armisav@gmail.com>

* Fix permission declaration

Signed-off-by: Artem Savchenko <armisav@gmail.com>

* Fix lock file

Signed-off-by: Artem Savchenko <armisav@gmail.com>

* Guest permissions

Signed-off-by: Artem Savchenko <armisav@gmail.com>

* Allow guests to update their own documents

Signed-off-by: Artem Savchenko <armisav@gmail.com>

* Add modules order

Signed-off-by: Artem Savchenko <armisav@gmail.com>

* Fix translations, icons

Signed-off-by: Artem Savchenko <armisav@gmail.com>

* Fix disabled apps and update translations

Signed-off-by: Artem Savchenko <armisav@gmail.com>

---------

Signed-off-by: Artem Savchenko <armisav@gmail.com>

models/document/src/index.ts

@@ -540,6 +540,19 @@ export function createModel (builder: Builder): void {
   defineDocument(builder)
 
   defineApplication(builder)
+  builder.createDoc(
+    core.class.ModulePermissionGroup,
+    core.space.Model,
+    {
+      application: document.app.Documents,
+      role: AccountRole.Guest,
+      permissions: [],
+      spaceClass: document.class.Teamspace,
+      enabled: true,
+      order: 40
+    },
+    document.ids.ModulePermissionGroup
+  )
   definePermissions(builder)
 
   builder.createDoc(core.class.DomainIndexConfiguration, core.space.Model, {

models/document/src/plugin.ts

@@ -61,6 +61,9 @@ export default mergeIds(documentId, document, {
     Document: '' as Ref<ActionCategory>,
     Other: '' as Ref<TagCategory>
   },
+  ids: {
+    ModulePermissionGroup: '' as Ref<Doc>
+  },
   string: {
     ConfigDescription: '' as IntlString,
     ParentDocument: '' as IntlString,