feat: add issue template and create issue #12 for RBAC implementation
Some checks are pending
Docker Test / test (push) Waiting to run
Some checks are pending
Docker Test / test (push) Waiting to run
This commit is contained in:
parent
df4a9fb9df
commit
855c6d8251
1 changed files with 5 additions and 5 deletions
10
ISSUE-12.md
10
ISSUE-12.md
|
|
@ -1,19 +1,19 @@
|
|||
# Issue #12: Implement Role-Based Access Control (RBAC) for Dispute Endpoints
|
||||
|
||||
## Description
|
||||
Implement role-based access control for dispute-related endpoints to ensure that only users with the appropriate roles (`user`, `moderator`, or `admin`) can perform specific actions on disputes.
|
||||
Implement role-based access control for dispute-related endpoints to ensure that only users with the appropriate roles can perform actions such as opening disputes, changing dispute status, and making final decisions.
|
||||
|
||||
## Acceptance Criteria
|
||||
- [x] Middleware `requireRole` is implemented and tested
|
||||
- [x] Dispute endpoints are protected by appropriate role checks
|
||||
- [x] Integration tests verify correct access control for different user roles
|
||||
- [x] Documentation of RBAC in `docs/roles-and-permissions.md` is updated
|
||||
- [x] Integration tests verify role-based access control
|
||||
- [x] Documentation of roles and permissions is updated
|
||||
|
||||
## Related Files
|
||||
- `backend/src/middleware/requireRole.js`
|
||||
- `backend/src/middleware/requireRole.test.js`
|
||||
- `backend/src/dispute-flow/`
|
||||
- `backend/src/dispute-flow/...` (to be implemented)
|
||||
- `docs/roles-and-permissions.md`
|
||||
|
||||
## Notes
|
||||
This task builds upon the existing role-based access control implementation and focuses specifically on dispute-related functionality. The middleware should be used to protect endpoints in the dispute flow.
|
||||
This issue builds upon the existing role-based access control implementation and focuses specifically on dispute-related functionality. The middleware should be used to protect endpoints in the dispute flow.
|
||||
Loading…
Add table
Add a link
Reference in a new issue