CHI-3566: Add contactField permission tests and fix default-allow behavior

[Copilot]

Description

Adds comprehensive test coverage for contactField permissions and fixes the permission logic to implement default-allow for unspecified fields.

Key Changes:

• Test Coverage: Added 28 tests covering all contactField permission edge cases:

  • Fields not mentioned in any field condition → allowed by default
  • Condition sets without field conditions → apply to all fields
  • Multiple field conditions in same set → always false, overridable by other sets
  • Time-based conditions, owner/supervisor checks with field restrictions

• Permission Logic Fix: Modified contactField case in rules.ts:

  • Check if field is mentioned in any field condition before applying restrictions
  • Return true (allow) for fields not explicitly restricted
  • Apply time-based conditions using contact.createdAt instead of non-existent target.createdAt

Example Behavior:

// Rules: [['isOwner', { field: 'rawJson.caseInformation.callSummary' }]]
can('editContactField', { contact, field: 'rawJson.caseInformation.callSummary' }) 
  // → checks isOwner condition
can('editContactField', { contact, field: 'rawJson.caseInformation.categories' }) 
  // → true (field not mentioned, allowed by default)

Checklist

• Corresponding issue has been opened
• New tests added
• Feature flags added
• Strings are localized
• Tested for chat contacts
• Tested for call contacts

Other Related Issues

None

Verification steps

Run the test suite:

cd plugin-hrm-form && npm test -- rules.test.ts

All 293 tests should pass, including the new contactField permission tests.

AFTER YOU MERGE

1. Cut a release tag using the Github workflow. Wait for it to complete and notify in the #aselo-deploys Slack channel.
2. Comment on the ticket with the release tag version AND any additional instructions required to configure an environment to test the changes.
3. Only then move the ticket into the QA column in JIRA

You are responsible for ensuring the above steps are completed. If you move a ticket into QA without advising what version to test, the QA team will assume the latest tag has the changes. If it does not, the following confusion is on you! :-P

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.