Add support for drawer permission groups

[jxjj]

Initial support for drawer permissions and groups. This slice contains just the groups stuff.

• new endpoints in DrawerPermissions controller.
• extract group type helpers common to drawer groups and instance groups to a GroupTypeCatalog class.
• move shared firstOrProvisionRemoteUser() method to Instance_Controller
• add jsonSerialize to DrawerGroup
• add a notRegex helper to the SimpleValidator class (some ride-along reformatting, sry)

[Copilot]

Pull request overview

Adds initial JSON API support for managing drawer permission groups, and refactors shared “group type” logic so both instance groups (AdminPermissions) and drawer groups use a common catalog.

Changes:

• Introduces DrawerPermissions controller endpoints for listing/creating/updating/deleting a user’s drawer groups, plus catalog and manageable-drawers endpoints.
• Extracts built-in + auth-helper group type logic into GroupTypeCatalog and updates AdminPermissions to use it.
• Improves validation helpers (regex robustness + new notRegex), moves firstOrProvisionRemoteUser() to Instance_Controller, and adds JSON serialization to DrawerGroup.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
application/controllers/DrawerPermissions.php	New JSON API controller for drawer group/type/drawer listing and CRUD.
application/libraries/GroupTypeCatalog.php	Centralizes built-in + auth-helper group type metadata and helper methods.
application/controllers/AdminPermissions.php	Replaces in-controller group type logic with GroupTypeCatalog; updates related checks.
application/core/Instance_Controller.php	Adds shared firstOrProvisionRemoteUser() for controllers that need remote-user provisioning.
application/models/Entity/DrawerGroup.php	Adds JsonSerializable payload (mirrors InstanceGroup style).
application/libraries/SimpleValidator.php	Adds notRegex() and hardens regex() against non-string inputs.
application/libraries/MockAuthHelper.php	Stops auto-marking newly created remote users as super admins.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.