AAP-38623: Internal RH user check.

[romartin]

Jira Issue: https://issues.redhat.com/browse/AAP-38623

Description

Replace the actual RH employee check by the RH internal user check.

Testing

1. Pull down the PR
2. Run the service
3. Login as a RH internal user
4. Verify chatbot link and page are accessible

Scenarios tested

Tested locally against my RH user.

Production deployment

• This code change is ready for production on its own
• This code change requires the following considerations before going to production:

[romartin]

About the pip-audit check failed, no idea, I did no changes on the dependency tree in this PR.... :/

[romartin]

@jameswnl @goneri PR ready for review! Finally also did:

• Refactor rh_employee field on database by rh_internal
• Rename exception code permission_denied__user_not_rh_employee

Thanks!

[romartin]

Can we report a separate issue for the pip-audit check failed? It looks it is something not related to this PR....
https://github.com/ansible/ansible-ai-connect-service/actions/runs/12792436907/job/35662888198?pr=1494

Name | Version | ID | Fix Versions | Description
--- | --- | --- | --- | ---
django | 4.2.17 | PYSEC-2025-1 | 4.2.18,5.0.11,5.1.5 | An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)

Name | Skip Reason
--- | ---
ansible-ai-connect | Dependency not found on PyPI and could not be audited: ansible-ai-connect (0.1.0)
certifi | Dependency not found on PyPI and could not be audited: certifi (2038.12.31)

[romartin]

signed commits, sorry

[romartin]

Created https://issues.redhat.com/browse/AAP-38703 for the pip-audit check issue.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
1.5% Duplication on New Code

See analysis details on SonarQube Cloud