Restrict some features for non-IDIR users

[TimCsaky]

Description

• user search requires full email address when authenticating with a non-idir token
• endpoint for making file public not available for non-idir users
• non-idir user cannot use create bucket (PUT /bucket)
• non-idir user CAN create sub-folder (PUT /bucket/:bucketId/child) (create sub-folder requires CREATE perm on parent)

https://apps.nrs.gov.bc.ca/int/jira/browse/SHOWCASE-3980

Types of changes

New feature (non-breaking change which adds functionality)

Checklist

• I have read the CONTRIBUTING doc
• I have checked that unit tests pass locally with my changes
• I have added tests that prove my fix is effective or that my feature works
• I have added necessary documentation (if appropriate)

Further comments

[github-actions]

Coverage Report

Totals
Statements:	55.61% ( 3057 / 5497 )
Methods:	45.79% ( 332 / 725 )
Lines:	62.24% ( 1833 / 2945 )
Branches:	48.82% ( 892 / 1827 )