Use delegated settings to allow nonadmins to manage flows

[lukasdotcom]

Resolves: #44

[julien-nc]

I don't think having OCA\Approval\Attribute\RequireApprovalAdmin is needed. It is not checked by the server security middleware because there is no way the server is aware of this attribute.

You can check how it's done in the theming app (in the server repo).

• Each controller method that is called by the settings section UI has the attribute #[AuthorizedAdminSetting(settings: Admin::class)] . The full class path is OCP\AppFramework\Http\Attribute\AuthorizedAdminSetting
• NoAdminRequired must not be set

[lukasdotcom]

I used the group folders app as my example to build of, but didn't notice that there was a custom middleware in the app.

[thekk1]

The implementation is not complete.
If I allow non admin persons or groups to setup the approval workflows, they are not able to see or set the invisible tags nor they are able to create some.