Description

Once we decide with high granularity what ZObjects and sub-ZObjects should be restricted to what changes and to what users, (T321186) we will proceed to implement these restrictions.

This is an Epic task to gather all individual restriction implementation tasks.

Desired behavior/Acceptance criteria (returned value, expected error, performance expectations, etc.)

Every sub-task should make sure that:

• The restriction is implemented
• There's specific tests on authentication for every granular access restriction

Completion checklist

• Before closing this task, review one by one the checklist available here: https://www.mediawiki.org/wiki/Abstract_Wikipedia_team/Definition_of_Done#Back-end_Task/Bug_completion_checklist