Teams: Restrict provisioned teams from being updated and deleted (#103454)

* restrict provisioned teams from being updated and deleted

* check if team is provisioned before update and delete

* add function getTeamDTOByID()

* check if team is provisioned in access control

* fix TestDeleteTeamMembersAPIEndpoint

* add unit tests

* add function for validating a team

pkg/services/accesscontrol/ossaccesscontrol/team.go

@@ -2,6 +2,7 @@ package ossaccesscontrol
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"strconv"
 
@@ -54,7 +55,7 @@ func ProvideTeamPermissions(
 				return err
 			}
 
-			_, err = teamService.GetTeamByID(ctx, &team.GetTeamByIDQuery{
+			existingTeam, err := teamService.GetTeamByID(ctx, &team.GetTeamByIDQuery{
 				OrgID: orgID,
 				ID:    id,
 			})
@@ -62,6 +63,10 @@ func ProvideTeamPermissions(
 				return err
 			}
 
+			if existingTeam.IsProvisioned {
+				return errors.New("team permissions cannot be updated for provisioned teams")
+			}
+
 			return nil
 		},
 		Assignments: resourcepermissions.Assignments{