Record Contribution: Manage internal System user to interact with other modules during Kafka event processing

Purpose/Overview:

Interaction between Okapi modules is not possible without proper authentication and authorization. Each call should be associated with an authorized requestor. When a call comes from UI it's handled on behalf of real user. In case of Kafka event processing there is no such user. It has to be substituted with internal (system) one. Since Folio currently does not support system users platform wide, modules have to create and maintain this type of user by their own. There are a couple of examples of how it could be done:

• in mod-search (SystemUserService)
• in mod-remote-storage (SecurityManagerService)

Acceptance Criteria:

• system user created upon tenant initialization
• user has the permissions required for Contribution events processing
• permissions can be defined externally (application property, special file etc) so that the permission list can be easily extended
• system user can be associate with required external module calls