BugFix: Fixed query auth

[parmesant]

Auth flow for query and permission assignment for ListStream changed

Fixes #XXXX.

Description

This PR fixes a flaw in the auth flow for the query API
It also changes the Permission for the action ListStream from Unit to Stream which will limit the response of the API to only the streams that the user is allowed to see

---

This PR has:

• been tested to ensure log ingestion and log query works.
• added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader.
• added documentation for new or modified features or behaviors.

[coveralls]

Pull Request Test Coverage Report for Build 12512483828

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 0 of 46 (0.0%) changed or added relevant lines in 4 files are covered.
• 411 unchanged lines in 8 files lost coverage.
• Overall coverage increased (+0.3%) to 11.831%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
src/handlers/airplane.rs	0	2	0.0%
src/cli.rs	0	3	0.0%
src/handlers/http/logstream.rs	0	12	0.0%
src/handlers/http/query.rs	0	29	0.0%

Files with Coverage Reduction	New Missed Lines	%
src/handlers/http/modal/utils/logstream_utils.rs	2	0.0%
src/utils/json/mod.rs	7	33.96%
src/alerts/mod.rs	13	0.0%
src/utils/json/flatten.rs	30	85.35%
src/metadata.rs	43	1.31%
src/option.rs	71	0.0%
src/handlers/http/logstream.rs	120	1.53%
src/storage/object_storage.rs	125	0.0%

Totals
Change from base Build 12441566914:	0.3%
Covered Lines:	2152
Relevant Lines:	18190

---

💛 - Coveralls

[nikhilsinhaparseable]

fix is validated, @de-sh please review the code once

[de-sh]

Suggested change

	.map_err(|err| StreamError::Anyhow(anyhow::Error::msg(err.to_string())))?;
	.map_err(|err| anyhow::Error::msg(err.to_string()))?;

[de-sh]

Suggested change

	.unwrap()
	.unwrap()

??

[de-sh]

I'd suggest reverting changes here and moving it to the call site

[de-sh]

e.g:

       for stream_name in streams {
            authorize_and_set_filter_tags(&mut query, &permissions, &stream_name).map_err(
                |_| Status::permission_denied("User Does not have permission to access this"),
            )?;
        }