RW 1058: User posting rights for reports

[attiks]

#RW-1058

Replaces #895

[attiks]

Test is failing on entraid and has hard-coded URLs

    $data['settings']['authorization_endpoint_wa'] = 'http://localhost/robots.txt';
    $data['settings']['token_endpoint_wa'] = 'http://localhost/robots.txt';
    $data['settings']['iss_allowed_domains'] = 'http://localhost/robots.txt';

It also breaks $this->drupalLogin() for all tests

[attiks]

Caused by new docker images, #910 is code from yesterday that passed and is now failing.

[orakili]

Latest changes to code look good. Will do more thorough testing soon.

[github-actions]

Coverage Report

Totals
Statements:	18.39% ( 2337 / 12709 )
Methods:	19.19% ( 138 / 719 )
Lines:	18.34% ( 2199 / 11990 )