#34 Add Role Based Access Control

[jkarenzi]

What does this PR do?

Adds role based access control to the project

Description of Task to be completed?

• Define roles and permissions for vendors and buyers
• Implement an API endpoint for managing roles and permissions
• Assign roles and permissions to users during registration or profile update
• Enforce role-based access control throughout the application
• Implement appropriate error handling and responses
• Write comprehensive unit tests

How should this be manually tested?

• After cloning the repo, perform CRUD operations on roles by accessing the api/v1/roles route
• Test checkRole ang checkPermissions middleware by applying them to routes that need to be protected

Any background context you want to provide?

• There are three roles: Vendor, Buyer and Admin

Vendor permissions

• manage_products
• fulfill_orders
• view_sales_reports
• manage_inventory
• manage_account

Buyer permissions

• browse_products
• add_to_cart
• check_out
• view_order_history
• track_orders
• manage_account
• leave_reviews
• view_wishlist
• receive_notifications

Admin permissions

• manage_users

• manage_roles

• manage_products

• manage orders

• manage_categories

• manage_shipping

• manage_payments

• view_reports

• checkRole middleware takes in an array of roles that are allowed to access a certain route

     e.g checkRole(['Admin','Vendor'])

• checkPermission middleware takes in a string (permission), that is required to access a certain route

    e.g checkPermissions('manage_cart')

• The above middleware rely on authentication middleware(middleware that will check if a user is logged in)

What are the relevant pivotal trackers?

#34

[ambroisegithub]

Please Rease PR with only one commit not 37

[Habinezajanvier]

👍