🛂(abilities) fix anonymous and unrelated users accessing resources

The function computing abilities return "True" for method get,
even if role of request user was None.

src/backend/core/models.py

@@ -355,7 +355,7 @@ class Team(BaseModel):
             is_owner_or_admin = role in [RoleChoices.OWNER, RoleChoices.ADMIN]
 
         return {
-            "get": True,
+            "get": bool(role),
             "patch": is_owner_or_admin,
             "put": is_owner_or_admin,
             "delete": role == RoleChoices.OWNER,

src/backend/core/tests/test_models_teams.py

@@ -62,7 +62,7 @@ def test_models_teams_get_abilities_anonymous():
     abilities = team.get_abilities(AnonymousUser())
     assert abilities == {
         "delete": False,
-        "get": True,
+        "get": False,
         "patch": False,
         "put": False,
         "manage_accesses": False,
@@ -75,7 +75,7 @@ def test_models_teams_get_abilities_authenticated():
     abilities = team.get_abilities(factories.UserFactory())
     assert abilities == {
         "delete": False,
-        "get": True,
+        "get": False,
         "patch": False,
         "put": False,
         "manage_accesses": False,