fix: fixed auth groups application
- Removed code duplication by placing a common method in dataset/subproject/tenant to build the auth groups correctly based on access policy
- Fixed the patch endpoint (viewer was not able to close a read-only opened dataset)
- Fixed issue on gcsAccessToken by setting the correct write authorized to check for non-read-only requests.
- Added comment before each method to emphasize the required role.
Edited by Diego Molteni