Set up Role-Based Access Control

[seifallah12345]

Ensure only authorized users can approve/reject requests or perform certain actions.

Acceptance Criteria:

• Different roles (employee, manager, HR) have different permissions.
• Access control is enforced for all actions.