Fix bug in User.all_roles query + use SA2.0

[jdavcs]

I think this query never worked as intended: it always raised an error (clauses like joinedload(User.roles.role) don't work). The error was caught and silenced, so it was never detected.

The proposed solution produces a simple and straightforward query:

SELECT role.id, role.create_time, role.update_time, role.name, role.description, role.type, role.deleted 
FROM role JOIN user_role_association ON role.id = user_role_association.role_id JOIN galaxy_user ON galaxy_user.id = user_role
WHERE user_role_association.user_id = :user_id_1 UNION SELECT role.id, role.create_time, role.update_time, role.name, role.des
FROM role JOIN group_role_association ON role.id = group_role_association.role_id JOIN user_group_association ON user_group_as
WHERE user_group_association.user_id = :user_id_2

We union the user roles with the group roles for groups to which the user belongs - no need to apply multiple joinedload options to the User.

Ref: #12541

How to test the changes?

(Select all options that apply)

• I've included appropriate automated tests.
• This is a refactoring of components with existing test coverage.
• Instructions for manual testing are as follows:
  1. [add testing steps and prerequisites here if you didn't write automated tests covering all your changes]

License

• I agree to license these and all my past contributions to the core galaxy codebase under the MIT license.

[jdavcs]

Some failures seem relevant.

[jmchilton]

Does the join implicitly load the models now?

[jdavcs]

Not implicitly. It's the from_statement method: "...to use this SELECT statement as a source of complete [Foo] entities instead, we can link these columns to a regular ORM-enabled Select construct using the Select.from_statement() method" (ref)