Improve vulnerabilities permissions checks spec

If we improve the specs aiming for permissions checks, we should be able to faster catch all endpoints we need to change when consolidating permissions or introducing custom roles. This issue should be a demonstration of things that we should check whenever we consolidate permissions or introduce a new custom role:

This issue is about adding all needed specs for vulnerabilities consolidated under admin_vulnerability and read_vulnerability.

Ideas on specs improvement

  1. After we find all affected controllers, check if there are permissions-related tests, add them if not
  2. Check if there are feature spec in ee/spec/features for the affected controller actions, add them if not
  3. Check all related graphql and REST API endpoints

Implementation Plan

Edited by mo khan