Prevent guests from locking MR or assigning reviewers

Chad Lavimoniererequested to merge
20250109-clavimoniere-mr-prevent-guest-locking-assigning into master

What does this MR do and why?

Guest users do not have permission to update MRs, so they should not be shown the affordances for locking discussion or assigning reviewers.

Screenshots or screen recordings

Before After
image image

How to set up and validate locally

  1. Check out this branch
  2. In the GDK, impersonate or log in as a guest user
  3. Visit an MR

You should not see the Assign button in the Reviewers sidebar widget. You should also not see the Lock merge request menu item in the MR actions dropdown menu.

Merge request reports