Spike: Define authz requirements for Extensibility MVP

[MaferMazu]

Description

Analyze and identify the authorization tasks required to support the Minimum Viable Product (MVP) for roles and permission extensibility.

[MaferMazu]

In today's RBAC sync, Jenna @jmakowski1123 proposed doing the spike over LTI instead of Content Tagging to take advantage of the complexity it could bring, and to leverage the availability of the team working on LTI.

Also, @rodmgwgu could help us here because he gathered some ideas at the conference. ✨

[MaferMazu]

@gviedma-aulasneo confirm we are going to work around LTI, and the idea is to investigate the minimum to make authz extensible and then start redirecting this work to the LTI cases.