For T323228, we are making it so that all organizer actions (like being able to edit the event, remove participants, send messages, etc.) will have to be made on the wiki where the event was created. While the other subtasks of T323228 cover the UI aspect of this (and also some specific REST API responses), the backend for permission checks should always fail when the event is nonlocal, as a last line of defense.
Acceptance criteria
- The internal PermissionChecker methods should disallow the action (= return false) for all the following actions when the event is not local:
- Edit event
- Delete event
- Register for event
- Message participants
- Remove participants
- View private participants
- View participants' non-PII answers
- View aggregated answers
Note: in theory, it should not be possible to test these changes. As mentioned above, these are just the last line of defense, and the event wiki check should normally be done separately in the interface.
