[backend] Check authorized members for element access (#4538)

[SouadHadjiat]

Proposed changes

• check for authorized members for element access: element was accesible for user not in authorized members
• refacto isUserCanAccessStixElement() in order to unit test easily element access to user
• unit test isUserCanAccessStixElement

Related issues

• Extend authorized_member system to Cases, Groupings and Reports #4538

Checklist

• I consider the submitted work as finished
• I tested the code for its functionality
• I wrote test cases for the relevant uses case (coverage and e2e)
• I added/update the relevant documentation (either on github or on notion)
• Where necessary I refactored code to improve the overall quality

Further comments

[codecov]

Codecov Report

Attention: Patch coverage is 97.72727% with 2 lines in your changes missing coverage. Please review.

Project coverage is 64.31%. Comparing base (7d55b76) to head (ba457a5).
Report is 1 commits behind head on master.

Files with missing lines	Patch %	Lines
...encti-platform/opencti-graphql/src/utils/access.ts	97.72%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #9809      +/-   ##
==========================================
+ Coverage   64.29%   64.31%   +0.02%     
==========================================
  Files         655      655              
  Lines       62933    62957      +24     
  Branches     6964     6976      +12     
==========================================
+ Hits        40460    40492      +32     
+ Misses      22473    22465       -8     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[richard-julien]

We could maybe extract All ids from the object to prevent using a special option useStandardId