Better reporting for user limits (cvat-ai#5225)

- Added explanatory messages for actions denied for user limits
- Fixed few rules and checks
- Upgraded OPA version

.github/workflows/full.yml

@@ -246,7 +246,7 @@ jobs:
           python cvat/apps/iam/rules/tests/generate_tests.py \
             --output-dir cvat/apps/iam/rules/
 
-          curl -L -o opa https://openpolicyagent.org/downloads/v0.34.2/opa_linux_amd64_static
+          curl -L -o opa https://openpolicyagent.org/downloads/v0.45.0/opa_linux_amd64_static
           chmod +x ./opa
           ./opa test cvat/apps/iam/rules
 

.github/workflows/helm.yml

@@ -83,6 +83,8 @@ jobs:
         pip3 install --user -r tests/python/requirements.txt
 
     - name: REST API and SDK tests
+      # We don't have external services in Helm tests, so we ignore corresponding cases
+      # They are still tested without Helm
       run: |
         kubectl cp tests/mounted_file_share/images $(kubectl get pods -l component=server -o jsonpath='{.items[0].metadata.name}'):/home/django/share
         pytest --platform=kube -m "not with_external_services" tests/python

.github/workflows/main.yml

@@ -213,7 +213,7 @@ jobs:
           python cvat/apps/iam/rules/tests/generate_tests.py \
             --output-dir cvat/apps/iam/rules/
 
-          curl -L -o opa https://openpolicyagent.org/downloads/v0.34.2/opa_linux_amd64_static
+          curl -L -o opa https://openpolicyagent.org/downloads/v0.45.0/opa_linux_amd64_static
           chmod +x ./opa
           ./opa test cvat/apps/iam/rules
 

.github/workflows/schedule.yml

@@ -221,7 +221,7 @@ jobs:
 
       - name: OPA tests
         run: |
-          curl -L -o opa https://openpolicyagent.org/downloads/v0.34.2/opa_linux_amd64_static
+          curl -L -o opa https://openpolicyagent.org/downloads/v0.45.0/opa_linux_amd64_static
           chmod +x ./opa
           ./opa test cvat/apps/iam/rules