erp5_web: WebSite_login: do not redirect to a came_from that is not child of the topmost url document in the given instance.

erp5_base.Base_getURLTopmostDocumentValue.xml: add a method to get the topmost traversed url in an ERP5 instance. In base it returns the portal.

Class FolderMixIn: add isURLAncestorOf method. Returns True if the given_url is child of the url of the given_url is child of the url of the document that the method is called on, False otherwise

This is too inconvenient when resizing browser size, it requires in
some cases to do taller or shorter many times only because we resized
the browser.

Also, former way was not working nicely when editor like code mirror
was used

No workflow state provides Modify Portal Content to a Role (except Manager).
Change the guard to be based on role instead of permission, so that Assignor can also trigger the transition.

This reverts commit 85c87bc6.

This publication section is not present in erp5_web_renderjs_ui or any
of its dependencies, so we cannot reference it from here.

ERP5Site_reindexAll is now called only once when --recreate_catalog=1 is explicitly specified.
Also manage_catalogClear is not called with --load unless --recreate_catalog=1 is explicitly specified.

erp5_test_result: fix AttributeError: string_index in TestResult_view/listbox_string_index tales expression

because it is a generic tool and access restriction should be done by API.

test.erp5.testUpgrader.py: update the bt5list in afterSetUp(). Otherwise the user has to invoke genbt5list manually before runnning the test. It was also confusing, because the same test would pass in the server but not locally

Solve divergence dialog was raising unauthorized error when new solver process was created
by this script (when called with someone who was not manager). Therefore use proxy role and
protect call with "View" permission. View is used instead of modify portal content since we could
imagine cases where user might need to solve divergence even though is has no right to modify
delivery.