944 B
944 B
Issue #12: Implement Role-Based Access Control (RBAC) for Dispute Endpoints
Description
Implement role-based access control for dispute-related endpoints to ensure that only users with the appropriate roles (user, moderator, or admin) can access specific dispute functionalities.
Acceptance Criteria
- Dispute creation endpoint is accessible only to
userrole - Dispute status change endpoint is accessible only to
moderatorandadminroles - Dispute final decision endpoint is accessible only to
adminrole - Integration tests are added to verify the role-based access control
- Documentation is updated to reflect the new RBAC implementation
Related Files
backend/src/routes/disputes.jsbackend/src/middleware/requireRole.jsbackend/src/controllers/dispute.controller.js
Notes
This issue builds upon the existing roles and permissions defined in docs/roles-and-permissions.md.