refactor(web): migrate rbac access console contracts (#38256)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

api/openapi/markdown/console-openapi.md

@@ -20213,7 +20213,7 @@ Whitelist scopes accepted by RBAC app and dataset access config APIs.
 | Name | Type | Description | Required |
 | ---- | ---- | ----------- | -------- |
 | data | [ [ResourceUserAccessPolicies](#resourceuseraccesspolicies) ] |  | No |
-| scope | string |  | Yes |
+| scope | [RBACResourceWhitelistScope](#rbacresourcewhitelistscope) |  | Yes |
 
 #### ResourceWhitelist
 

api/services/enterprise/rbac_service.py

@@ -249,7 +249,7 @@ class ResourceUserAccessPolicies(_RBACModel):
 
 
 class ResourceUserAccessPoliciesResponse(_RBACModel):
-    scope: str
+    scope: RBACResourceWhitelistScope
     data: list[ResourceUserAccessPolicies] = Field(default_factory=list)
 
 

api/tests/unit_tests/services/enterprise/test_rbac_service.py

@@ -299,7 +299,7 @@ class TestResourceAccess:
 
     def test_app_user_access_policies(self, mock_send: MagicMock):
         mock_send.return_value = {
-            "scope": "app",
+            "scope": "specific",
             "data": [
                 {
                     "account": {"account_id": "acct-1", "account_name": "Alice"},