959 B
959 B
Issue #12: Implement Role-Based Access Control (RBAC) for Dispute Endpoints
Description
Implement role-based access control for dispute-related endpoints to ensure that only users with the correct roles can perform specific actions within the dispute flow. This includes creating, viewing, and managing disputes.
Acceptance Criteria
- Middleware
requireRoleis implemented and tested - Dispute endpoints are protected by appropriate role checks
- Integration tests verify that only authorized users can access dispute endpoints
- Documentation of roles and permissions is updated
Related Files
backend/src/middleware/requireRole.jsbackend/src/middleware/requireRole.test.jsbackend/src/controllers/dispute.controller.jsbackend/src/routes/dispute.routes.js
Notes
This task builds upon the existing role-based access control implementation and ensures that dispute-related functionality is properly secured.