UI: Don't show Resultant-ACL banner when wildcard policy present

[hashishaw]

This PR is to update the behavior of the Resultant ACL banner so that it no longer shows in child namespaces if the user has a "*" path in their policy.

• Ent tests passed

How to test

To set up namespaces with some users to log in and verify the behavior, run the following script:

# create namespace
vault namespace create admin
vault namespace create -namespace=admin child

# create policies
vault policy write root-admin - <<EOF
path "*" {
capabilities = ["read", "list", "create", "update", "delete"]
}
EOF
vault policy write -namespace=admin admin - <<EOF
path "*" {
capabilities = ["read", "list", "create", "update", "delete"]
}
EOF

# create users
vault auth enable userpass
vault write auth/userpass/users/root password=password policies=root-admin
vault auth enable -namespace=admin userpass
vault auth tune -namespace=admin -listing-visibility="unauth" userpass
vault write -namespace=admin auth/userpass/users/admin password=password policies=admin

Test 1

• Log into root namespace with root username
• resultant-acl banner is not rendered
• Navigate to admin namespace
  - Previously, resultant-acl banner would show but with these changes it does not
• Change namespace in url to some namespace that does not exist (eg "foo")
  - Previously, resultant-acl banner would show but with these changes it does not

Test 2

• Log into admin namespace with admin username
• resultant-acl banner is not rendered
• Navigate to child namespace
  - Previously, resultant-acl banner would show but with these changes it does not
• Change namespace in url to some namespace that does not exist (eg "foo")
• Resultant-acl banner should show

Before

After

This PR also updates the Resultant-ACL banner so that it only shows when a user has a non-expired token.

[github-actions]

CI Results:
All Go tests succeeded! ✅

[hellobontempo]

Thank you for all of the comments and detailed testing steps!

[github-actions]

Build Results:
All builds succeeded! ✅