feat: make app inaccessible if workspaceAccessibility is No

Signed-off-by: SuZhou-Joe <suzhou@amazon.com>

src/plugins/opensearch_dashboards_overview/public/plugin.ts

@@ -40,6 +40,7 @@ import {
   AppStatus,
   AppNavLinkStatus,
   Branding,
+  WorkspaceAccessibility,
 } from '../../../core/public';
 import {
   OpenSearchDashboardsOverviewPluginSetup,
@@ -106,6 +107,7 @@ export class OpenSearchDashboardsOverviewPlugin
         // Render the application
         return renderApp(coreStart, depsStart as AppPluginStartDependencies, params);
       },
+      workspaceAccessibility: WorkspaceAccessibility.NO,
     });
 
     if (home) {

src/plugins/workspace/public/utils.test.ts

@@ -8,7 +8,7 @@ import {
   getSelectedFeatureQuantities,
   isAppAccessibleInWorkspace,
 } from './utils';
-import { PublicAppInfo } from '../../../core/public';
+import { PublicAppInfo, WorkspaceAccessibility } from '../../../core/public';
 import { AppNavLinkStatus } from '../../../core/public';
 
 describe('workspace utils: featureMatchesConfig', () => {
@@ -198,4 +198,18 @@ describe('workspace utils: isAppAccessibleInWorkspace', () => {
       )
     ).toBe(true);
   });
+
+  it('An app is not accessible if its workspaceAccessibility is no', () => {
+    expect(
+      isAppAccessibleInWorkspace(
+        {
+          id: 'home',
+          title: 'Any app',
+          mount: jest.fn(),
+          workspaceAccessibility: WorkspaceAccessibility.NO,
+        },
+        { id: 'workspace_id', name: 'workspace name', features: [] }
+      )
+    ).toBe(false);
+  });
 });

src/plugins/workspace/public/utils.ts

@@ -10,6 +10,7 @@ import {
   AppNavLinkStatus,
   DEFAULT_APP_CATEGORIES,
   WorkspaceObject,
+  WorkspaceAccessibility,
 } from '../../../core/public';
 
 /**
@@ -94,6 +95,13 @@ export const getSelectedFeatureQuantities = (
  * Check if an app is accessible in a workspace based on the workspace configured features
  */
 export function isAppAccessibleInWorkspace(app: App, workspace: WorkspaceObject) {
+  /**
+   * App is not accessible within workspace if it explicitly declare itself as workspaceAccessibility.No
+   */
+  if (app.workspaceAccessibility === WorkspaceAccessibility.NO) {
+    return false;
+  }
+
   /**
    * When workspace has no features configured, all apps are considered to be accessible
    */