Ab/hide solution content

[abeglova]

What are the relevant tickets?

closes https://github.com/mitodl/hq/issues/6459

Description (What does it do?)

This pr updates the content file apis to

1. Only show the content field in the /api/v1/contentfiles api to users who are staff admins or have content file viewer permissions. Anonymous and normal users can still access the api but do not see the content field
2. Update the /api/v1/content_file_search api to not display the content, summary or flashcard. Those fields are still in the index and used for search
3. Update /api/v0/vector_content_files_search to require admin or content file viewer permissions

How can this be tested?

1. Make sure you are not logged in
   go to http://open.odl.local:8065/api/v1/contentfiles/ you should not see the "content" field in the results
   go to http://open.odl.local:8065/api/v1/contentfiles/ you should not see the "content" field in the results

go to http://api.open.odl.local:8065/api/v1/content_file_search/ you should not see "content" in the results

go to http://api.open.odl.local:8065/api/v0/vector_content_files_search/ your should get a NotAuthenticated page

2. Log in as a normal user
   go to http://open.odl.local:8065/api/v1/contentfiles/ you should not see the "content" field in the results
   go to http://open.odl.local:8065/api/v1/contentfiles/ you should not see the "content" field in the results

go to http://api.open.odl.local:8065/api/v1/content_file_search/ you should not see "content" in the results

go to http://api.open.odl.local:8065/api/v0/vector_content_files_search/ your should get a PermissionDenied page

3. Log in as an admin
   go to http://open.odl.local:8065/api/v1/contentfiles/ you should see the "content" field in the results
   go to http://open.odl.local:8065/api/v1/contentfiles/ you should see the "content" field in the results

go to http://api.open.odl.local:8065/api/v1/content_file_search/ you should not see "content" in the results

go to http://api.open.odl.local:8065/api/v0/vector_content_files_search/ it should look normal

4. Go to http://api.open.odl.local:8065/admin/users/user/ pick a non-admin user "http://api.open.odl.local:8065/admin/users/user/ and add "content_file_viewer" to the user groups.
   Log in as that user

go to http://open.odl.local:8065/api/v1/contentfiles/ you should see the "content" field in the results
go to http://open.odl.local:8065/api/v1/contentfiles/ you should see the "content" field in the results

go to http://api.open.odl.local:8065/api/v1/content_file_search/ you should not see "content" in the results

go to http://api.open.odl.local:8065/api/v0/vector_content_files_search/ it should look normal

5. Follow the testing steps in Ab/test api changes for hiding content files learn-ai#192 to make sure integration with chatbots works

[github-actions]

OpenAPI Changes

Show/hide No detectable change.

Unexpected changes? Ensure your branch is up-to-date with main (consider rebasing).