diff --git a/ISSUE-12.md b/ISSUE-12.md index 1994545..9da9636 100644 --- a/ISSUE-12.md +++ b/ISSUE-12.md @@ -1,19 +1,18 @@ # Issue #12: Implement Role-Based Access Control (RBAC) for Dispute Endpoints ## Description -Implement role-based access control for dispute-related endpoints to ensure that only users with the appropriate roles can perform actions such as opening disputes, changing dispute status, and making final decisions. +Implement role-based access control for dispute-related endpoints to ensure that only users with the appropriate roles (`user`, `moderator`, or `admin`) can access specific dispute functionalities. ## Acceptance Criteria - [x] Middleware `requireRole` is implemented and tested -- [x] Dispute endpoints are protected by appropriate role checks +- [x] Dispute endpoints are secured with appropriate role requirements - [x] Integration tests verify role-based access control - [x] Documentation of roles and permissions is updated ## Related Files - `backend/src/middleware/requireRole.js` - `backend/src/middleware/requireRole.test.js` -- `backend/src/dispute-flow/...` (to be implemented) -- `docs/roles-and-permissions.md` +- `backend/src/dispute-flow/` ## Notes -This issue builds upon the existing role-based access control implementation and focuses specifically on dispute-related functionality. The middleware should be used to protect endpoints in the dispute flow. \ No newline at end of file +This issue builds upon the existing roles and permissions documentation to ensure that dispute-related endpoints are properly secured. \ No newline at end of file