Revoke FGA roles

[ruggi]

Fix #5138

This is a prep PR for incoming work on the share dialog actions.

Problem:

The logic for rejecting a pending request is mostly there (although not used), but it's missing the removal of FGA permissions.

Fix:

1. Add the functions to revoke all user roles (thanks @liady !)
2. Remove the user from collabs upon rejection (if present)
3. Added tests

[github-actions]

Try me

[relativeci]

Job #11341: Bundle Size — 63.24MiB (~-0.01%).

ce41c40(current) vs 2296c28 master#11331(baseline)

Warning

Bundle contains 58 duplicate packages – View duplicate packages

Bundle metrics   2 changes 1 regression

	Current Job #11341	Baseline Job #11331
Initial JS	50.42MiB(~+0.01%)	50.42MiB
Initial CSS	0B	0B
Cache Invalidation	18.78%	18.76%
Chunks	40	40
Assets	44	44
Modules	4459	4459
Duplicate Modules	598	598
Duplicate Code	31.92%	31.92%
Packages	467	467
Duplicate Packages	58	58

Bundle size by type   2 changes 1 regression 1 improvement

	Current Job #11341	Baseline Job #11331
JS	63.22MiB (~+0.01%)	63.22MiB
HTML	14.15KiB (-0.44%)	14.21KiB

---

View job #11341 report View feat/revoke-fga-relations branch activity View project dashboard

[github-actions]

Performance test results: