Implement basic role-based authorization

[efestrikesback]

• [ ] Instead of coding a custom authorization service, I can use spring security library

https://www.baeldung.com/spring-security-method-security