feat(server): granular permissions for api keys (#11824)

feat(server): api auth permissions

server/src/utils/access.ts

@@ -0,0 +1,15 @@
+import { Permission } from 'src/enum';
+import { setIsSuperset } from 'src/utils/set';
+
+export type GrantedRequest = {
+  requested: Permission[];
+  current: Permission[];
+};
+
+export const isGranted = ({ requested, current }: GrantedRequest) => {
+  if (current.includes(Permission.ALL)) {
+    return true;
+  }
+
+  return setIsSuperset(new Set(current), new Set(requested));
+};