[issue_tracker] Add ExternalIssueID field with permission control (#9795)

[arnav-makkar]

Brief summary of changes

This PR adds an External Issue ID field to the issue_tracker module, allowing administrators to link LORIS issues to external issue trackers (e.g., GitHub, Jira).

Key Features:

• New externalIssueID field (varchar 255) in the issues table
• Permission-based visibility and editing control via issue_tracker_external_id permission
• Field changes tracked in issue history
• Security: Backend validation prevents unauthorized edits via direct API calls

Implementation Details:

• Database: Added column to issues table and updated issues_history enum

• Backend: Permission checks in GET (hide field) and POST (validate edits) endpoints

• Frontend: Conditional rendering and editing based on user permission

• Migration: SQL patch for existing databases (2026-01-04-Add_ExternalIssueID_to_issues.sql)

• Have you updated related documentation?

  • CHANGELOG.md updated
  • Test plan updated with 7 new test cases
  • Raisinbread test data updated

Link(s) to related issue(s)

• Resolves [issue_tracker] External Issue ID #9795

[CamilleBeau]

@arnav-makkar Can you fix the tests on this PR?

[arnav-makkar]

@CamilleBeau Fixed the linter errors in IssueForm.js that were causing the tests to fail.
Please review the changes and merge when free. Thank you!

[arnav-makkar]

Hi @CamilleBeau, could you please review this PR?

[CamilleBeau]

The new permission should be given to admin

[arnav-makkar]

Thank you for the feedback.
I've updated this SQL patch to grant the permission to the admin user now

[skarya22]

@arnav-makkar could you fix the merge conflicts and then I will re-assign @CamilleBeau

[arnav-makkar]

Hi @skarya22, since this branch was a few months old I've rebased onto current main and resolved the merge conflicts.
I've also made a few changes and re-ran the manual tests as follows.

---

Admin (has the permission)

Permission is granted on the admin account:

The External Issue ID field renders on the Create New Issue form:

Submitted an issue with a value in the field:

On reopening, the value persists and the change is recorded in the comment history:

Non-admin user (without issue_tracker_external_id)

Created a test user granted only the basic issue tracker permissions:

The External Issue ID field does not render on the form:

Please let me know if any additional verification is needed.

Thank you!