fix: allow group members to read group information (#14200)

* - allow group members to read basic Group info
- allow group members to see they are part of the group, but not see that information about other members
- add a GetGroupMembersCountByGroupID SQL query, which allows group members to see members count without revealing other information about the members
- add the group_members_expanded db view
- rewrite group member queries to use the group_members_expanded view
- add the RBAC ResourceGroupMember and add it to relevant roles
- rewrite GetGroupMembersByGroupID permission checks
- make the GroupMember type contain all user fields
- fix type issues coming from replacing User with GroupMember in group member queries
- add the MemberTotalCount field to codersdk.Group
- display `group.total_member_count` instead of `group.members.length` on the account page

coderd/database/queries/groups.sql

@@ -36,25 +36,17 @@ SELECT
     groups.*
 FROM
     groups
-	-- If the group is a user made group, then we need to check the group_members table.
-LEFT JOIN
-    group_members
-ON
-    group_members.group_id = groups.id AND
-    group_members.user_id = @user_id
-	-- If it is the "Everyone" group, then we need to check the organization_members table.
-LEFT JOIN
-    organization_members
-ON
-    organization_members.organization_id = groups.id AND
-    organization_members.user_id = @user_id
 WHERE
-    -- In either case, the group_id will only match an org or a group.
-    (group_members.user_id = @user_id OR organization_members.user_id = @user_id)
-AND
-    -- Ensure the group or organization is the specified organization.
-    groups.organization_id = @organization_id;
-
+    groups.id IN (
+        SELECT
+            group_id
+        FROM
+            group_members_expanded gme
+        WHERE
+            gme.user_id = @user_id
+        AND
+            gme.organization_id = @organization_id
+    );
 
 -- name: InsertGroup :one
 INSERT INTO groups (