read_admin_cicd: Hide projects assigned to project runners list
This list has no data for users with `read_admin_cicd` custom admin role because `public_or_visible_to_user` (in `ProjectsFinder`, called in `RunnerProjectsResolver`) only returns public projects and projects the user can read (user has `read_project` on). | Admin user | Non-admin user with read_admin_cicd | | ------ | ------ | | ![Screenshot_2025-01-28_at_5.49.57_PM](/uploads/74ea56953b04410245903c5175b5e76c/Screenshot_2025-01-28_at_5.49.57_PM.png)| ![Screenshot_2025-01-28_at_5.50.02_PM](/uploads/7121e7d12b9a63ca9010a7fa07135e20/Screenshot_2025-01-28_at_5.50.02_PM.png) | Current attempts to enable `read_admin_cicd` users to view all projects assigned to a project runner have been unsuccessful. Previous proposed solutions ([1](https://gitlab.com/gitlab-org/gitlab/-/issues/517905#note_2365199622), [2](https://gitlab.com/gitlab-org/gitlab/-/issues/517905#note_2453414093)) were discontinued due to unintended permission escalation issues because of how our policy dependency is structured. We'll hide the projects assigned to project runners list as it's lower priority ([per Product assessment](https://gitlab.com/gitlab-org/gitlab/-/issues/507960#note_2455220419)). Users can still access this information through the jobs tab to view builds of projects assigned to the runner. This approach addresses our inability to display the expected content at this time.
issue