fix(graphql): listUsers resolver incorrect access check

[david-leifker]

Remove Authorization Check from listUsers GraphQL Resolver

Summary

This PR removes the authorization check from the listUsers GraphQL resolver, allowing all users to access the listUsers operation without requiring MANAGE privileges on CORP_USER and CORP_GROUP entities.

Changes

Removed Authorization Check

• File: datahub-graphql-core/src/main/java/com/linkedin/datahub/graphql/resolvers/user/ListUsersResolver.java
  • Removed AuthorizationUtils.canManageUsersAndGroups(context) check that was blocking access
  • Removed unused imports: AuthorizationUtils and AuthorizationException
  • The resolver now executes the user listing logic directly without authorization gates

Impact

• Before: Users without MANAGE privileges on CORP_USER and CORP_GROUP entities would receive an AuthorizationException when calling listUsers
• After: All authenticated users can now call listUsers without authorization restrictions

Related Context

This change aligns with the broader authorization strategy where entity-level access controls are enforced at the data layer (e.g., through EntityService and OperationContext) rather than at the GraphQL resolver level for user listing operations.

[alwaysmeticulous]

✅ Meticulous spotted 0 visual differences across 992 screens tested: view results.

Meticulous evaluated ~8 hours of user flows against your PR.

_{Expected differences? Click here. Last updated for commit 9aa59c9. This comment will update as new commits are pushed.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!