chore: fixes to objects/queryset perm checks + type updates

[zlwaterfield]

Changes

Related to RBAC project, see more: #24512

This PR:

• Checks for request in context when setting access control - sometimes this is called outside of a request and it's not available
• Move the filter by access level into it's own function so it can be called when dangerously getting queryset - right now access levels are not being checked in the filters for listing dashboards and insights
• Move around some UserAccessControlSerializerMixin usages so access levels are always available
• Update insight view post permissions because this is a post allowed with view only permissions
• Update dashboard retrieve to use the get object so permissions are checked - right now the get queryset is bypassing the object permissions
• Update some access control types on the frontend

Changes pulled out of: #27174

👉 Stay up-to-date with PostHog coding conventions for a smoother review.

Does this work well for both Cloud and self-hosted?

Yes

How did you test this code?

Manuallu

[github-actions]

Size Change: 0 B

Total Size: 1.11 MB

ℹ️ View Unchanged

Filename	Size
frontend/dist/toolbar.js	1.11 MB

_{compressed-size-action}

[posthog-bot]

📸 UI snapshots have been updated

1 snapshot changes in total. 0 added, 1 modified, 0 deleted:

• chromium: 0 added, 1 modified, 0 deleted (diff for shard 1)
• webkit: 0 added, 0 modified, 0 deleted

Triggered by this commit.

👉 Review this PR's diff of snapshots.

[posthog-bot]

📸 UI snapshots have been updated

1 snapshot changes in total. 0 added, 1 modified, 0 deleted:

• chromium: 0 added, 1 modified, 0 deleted (diff for shard 1)
• webkit: 0 added, 0 modified, 0 deleted

Triggered by this commit.

👉 Review this PR's diff of snapshots.

[zlwaterfield]

Working on fixing these tests. The fixes found some holes in the tests.