As an administrator, I want to define company and group-scoped permissions for an Account Role in Roles Admin

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.4.13 DXP GA1, Master
• Component/s: User Management > Roles
• Labels:
  • 7.4-ce-ga4
  • 7.4-dxp-ga1
  • 7.4-must
  • fc_21_09
  • pt-app-security-review
• Epic Link: Manage Account Roles
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/106784

Notes for QA:

1. In Account Management (widget), the Roles tab should not be available. Assigning roles to users is done through the Users tab only. This prevents 2B users from possibly seeing the Define Permissions views.
2. When editing an Account Role In the Account Admin Portlet, there should now be two tabs for defining owned Account role permissions:
   • Define Permissions (the old view, nothing has changed)
   • Define Group Scope Permissions (the new view, permissions can be scoped to specific sites)
3. When editing an Account Role In the Roles Admin Portlet, there should now be two tabs for defining shared Account role permissions:
   • Define Permissions (the old view, nothing has changed)
   • Define Group Scope Permissions (the new view, permissions can be scoped to specific sites)
4. In Roles Admin, no other Role types should see the Define Group Scope Permissions tab.