wse_preview migration does not reproduce the same access logic

Problem/Motivation

Migrating from wse_preview does not result in the same access logic post-migration.

wse_preview's entity.workspace.preview_link_form route definition used a _permission check using an "OR" syntax (+) that included the following permissions:

• manage workspace previews
• view any workspace
• edit any workspace
• administer workspaces

However, this module now uses the WorkspacePreviewLink's admin_permission attribute parameter for access control. Meaning link generation privileges are granted exclusively to users with the manage workspace previews permission.

That means users who could previously generate preview links aren't able to any longer.

Proposed resolution

Add the following migration to the module's installation hook:

$roles = Role::loadMultiple();
$adminPermission = 'manage workspace previews';
foreach ($roles as $role) {
  if ($role->hasPermission($adminPermission)) {
    continue;
  }
  $permissionGranted = FALSE;
  // These permissions are copied from the wse_preview module's
  // "entity.workspace.preview_link_form" route definition, which defined a
  // "_permission" check using an "OR" syntax that included the following
  // permissions.
  $permissions = [
    'view any workspace',
    'edit any workspace',
    'administer workspaces',
  ];
  foreach ($permissions as $permission) {
    if ($role->hasPermission($permission)) {
      $role->grantPermission($adminPermission);
      $permissionGranted = TRUE;
    }
  }
  if ($permissionGranted) {
    $role->save();
  }
}