Filter control interface messages using the workload's access rights

[windsource]

Reported by @krucod3:

Description

Implement the access rights for a Workload by providing the Control Interface instance a channel that leads to the Agent (currently the messages from the Control Interface are directly passed to the Server). The Agent can filter the messages depending on the access rights and forward only authorized messages.

Another possibility would be to embed the filtering in the Control Interface task, but this could make it hard to update the accessRights dynamically.

Goals

Authorization for the Control Interface

Tasks

tbd.