On job archival allow cleanup while preventing updates

Fabio Pitinorequested to merge
fp-split-job-cleanup-from-update-permissions into master

What does this MR do and why?

On job archival allow cleanup while preventing updates

Prevent forward update permissions such as play_job, retry_job, etc. while still allow cleanup permissions such as erase_build and cancel_build to still occur on archived jobs.

Changelog: fixed

References

Related to Allow erasing jobs in archived pipelines (#552346 - closed) as ultimate goal of this refactoring.

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports