helpyourneighbour/issue_123.md

Implement Role-Based Access Control (RBAC) for API Endpoints

Description

Implement role-based access control (RBAC) for the API endpoints to ensure that only users with the appropriate roles can access specific routes. This includes implementing middleware to check user roles and updating existing routes to use this middleware.

Acceptance Criteria

• Middleware requireRole is implemented and tested
• All existing API routes are updated to use the requireRole middleware where necessary
• New API endpoints are protected with appropriate role checks
• Documentation of RBAC in docs/roles-and-permissions.md is updated

Related Files

• backend/middleware/role.middleware.js
• backend/controllers/
• backend/routes/

Notes

This task builds upon the existing roles and permissions documentation. The implementation should follow the principles outlined in the documentation.