Add GlobalPolicy access_duo_entry_point ability

Mark Chaorequested to merge
581229-duo_classic_chat-convertion into master

What does this MR do and why?

Add GlobalPolicy access_duo_entry_point ability.

This will take over part of the responsibility of access_duo_classic_chat ability.

While access_duo_classic_chat will work correctly now in displaying the Duo sidebar, after https://gitlab.com/gitlab-org/gitlab/-/work_items/581229+s it will cease to work for Duo Core users. This new ability will carry them over by also checking access_duo_agentic_chat.

References

Screenshots or screen recordings

How to set up and validate locally

Currently there should not be any behavior change. So we can just verify that user with classic chat only, and both classic and agentic chat, can still access as usual.

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #581229 Fixs #588826 (closed)

Edited by Mark Chao

Merge request reports