[SM-949] Add endpoint to fetch events by service account

[Thomas-Avery]

Type of change

- [ ] Bug fix
- [X] New feature development
- [ ] Tech debt (refactoring, code cleanup, dependency upgrades, etc)
- [ ] Build/deploy pipeline (DevOps)
- [ ] Other

Objective

The purpose of this PR is to add a Secrets Manager endpoint for fetching events by service account.

Code changes

• bitwarden_license/src/Commercial.Core/SecretsManager/AuthorizationHandlers/ServiceAccounts/ServiceAccountAuthorizationHandler.cs:
  bitwarden_license/test/Commercial.Core.Test/SecretsManager/AuthorizationHandlers/ServiceAccounts/ServiceAccountAuthorizationHandlerTests.cs:
  src/Core/SecretsManager/AuthorizationRequirements/ServiceAccountOperationRequirement.cs:
  Add operation for the authz handler for reading service account events.

• src/Api/Controllers/EventsController.cs:
  src/Api/Utilities/ApiHelpers.cs:
  Extract the private method GetDateRange into the ApiHelpers utility so it can be used in this controller and the SM controller.

• src/Api/SecretsManager/Controllers/SecretsManagerEventsController.cs:
  Add a new controller for fetching Secrets Manager events.

• src/Core/Repositories/IEventRepository.cs:
  Add a new method to fetch events by organization and service account.

• src/Core/Repositories/TableStorage/EventRepository.cs:
  Add a new method to fetch events by organization and service account.

• src/Infrastructure.Dapper/Repositories/EventRepository.cs:
  Add a new method to fetch events by organization and service account.
  Fix missing Secrets Manager columns in the create many events flow.

• src/Infrastructure.EntityFramework/Repositories/EventRepository.cs:
  src/Infrastructure.EntityFramework/Repositories/Queries/EventReadPageByOrganizationIdServiceAccountIdQuery.cs:
  Add a new method and EF query to fetch events by organization and service account.

• src/Sql/SecretsManager/dbo/Stored Procedures/Event/Event_ReadPageByOrganizationIdServiceAccountId.sql:
  Add stored procedure for reading service account events.

• test/Api.IntegrationTest/SecretsManager/Controllers/SecretsManagerEventsControllerTests.cs:
  Add integration tests for new controller.

• test/Api.Test/SecretsManager/Controllers/SecretsManagerEventsControllerTests.cs:
  Add unit tests for new controller.

• util/Migrator/DbScripts/2023-10-09_00_Event_ReadPageByOrganizationIdServiceAccountId.sql:
  Migration to add the new stored procedure.

Before you submit

• Please check for formatting errors (dotnet format --verify-no-changes) (required)
• If making database changes - make sure you also update Entity Framework queries and/or migrations
• Please add unit tests where it makes sense to do so (encouraged but not required)
• If this change requires a documentation update - notify the documentation team
• If this change has particular deployment requirements - notify the DevOps team

[bitwarden-bot]

Checkmarx One – Scan Summary & Details – 78303a9b-4129-4d09-928b-28e9f821d7d0

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	CSRF	/src/Api/SecretsManager/Controllers/SecretsManagerEventsController.cs: 31	Attack Vector

[cd-bitwarden]

LGTM 😄

[vincentsalucci]

Just a couple of small side conversations that should be non-blocking. 👍

[cd-bitwarden]

LGTM !

[cd-bitwarden]

changes look good 👍 😄