Decouple :read_dependency from :download_code

Hinam Mehrarequested to merge
547086-fix-read-dependency into master

What does this MR do and why?

  • Decouple read_dependency from download_code in ProjectPolicy. Using the permissions matrix, assign read_dependency to Auditors or Developer+ users.
  • Similarly, decouple read_licenses
  • Use the correct licensed feature for both read_dependency and read_licenses.

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #547086 (closed)

Edited by Hinam Mehra

Merge request reports