Implement Role-Based Access Control (RBAC) in a Java microservice to enforce access control based on user roles after an authenticated request is received. The RBAC mechanism should ensure that users can only perform actions permitted by their assigned roles.
Acceptance Criteria:
Users can only access endpoints permitted by their assigned roles.
Unauthorized access is correctly denied with appropriate error messages.
API endpoints have clear role-based access rules enforced.
The implementation follows security best practices and is tested thoroughly.
Implement Role-Based Access Control (RBAC) in a Java microservice to enforce access control based on user roles after an authenticated request is received. The RBAC mechanism should ensure that users can only perform actions permitted by their assigned roles.
Acceptance Criteria: Users can only access endpoints permitted by their assigned roles. Unauthorized access is correctly denied with appropriate error messages. API endpoints have clear role-based access rules enforced. The implementation follows security best practices and is tested thoroughly.