Chrome: Hide Sidebar Panels if the user don't have the right capabilities

[youknowriad]

If the user doesn't have the "publish_posts" capability (a contributor), several panel sidebars should be hidden.

In this PR I'm hiding the "pending" toggle, the "schedule" panel and the post visibility is not editable. (similar to the current editor)

[codecov]

Codecov Report

Merging #2585 into master will increase coverage by 1.21%.
The diff coverage is 63.33%.

@@            Coverage Diff             @@
##           master    #2585      +/-   ##
==========================================
+ Coverage   31.42%   32.63%   +1.21%     
==========================================
  Files         177      178       +1     
  Lines        5407     5531     +124     
  Branches      946      959      +13     
==========================================
+ Hits         1699     1805     +106     
- Misses       3135     3150      +15     
- Partials      573      576       +3

Impacted Files	Coverage Δ
editor/sidebar/post-status/index.js	0% <0%> (ø)	⬆️
editor/sidebar/post-author/index.js	85% <100%> (ø)	⬆️
editor/sidebar/post-pending-status/index.js	58.33% <58.33%> (ø)
editor/sidebar/post-visibility/index.js	46.15% <83.33%> (+46.15%)	⬆️
editor/sidebar/post-schedule/index.js	65% <83.33%> (+65%)	⬆️
blocks/library/latest-posts/index.js	7.4% <0%> (-2.6%)	⬇️
editor/sidebar/post-schedule/clock.js	0% <0%> (ø)	⬆️
blocks/api/registration.js	100% <0%> (ø)	⬆️
...ebar/post-taxonomies/hierarchical-term-selector.js	0% <0%> (ø)	⬆️
... and 8 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5885233...40accca. Read the comment docs.

[aduth]

Nice 👍

One issue, which I expect is present on master, is that the author dropdown does not show (correctly) for contributor role, but only because it attempts to make the API request for users and fails. Up to you if you'd like to address that here or separately.

[youknowriad]

One issue, which I expect is present on master, is that the author dropdown does not show (correctly) for contributor role

Do you mean, instead of relying on the available users, we should rely on the capabilities?

[youknowriad]

@aduth I went ahead and updated to add the capability check. but the API request is still being fetched, because it's declared on the same withAPIData HoC. I don't know if we want to create another inner component just to avoid this failing request. An alternative could be to pass the dataProps to the mapPropsToData callback, this way we could decide to include an API call depending on the previous result of another API call. This could be something to try separately;

[aduth]

Yeah, either of those seem worth exploring. There should ideally be no 403 requests issued if we know they can be avoided.