Resolves #1013 Updated onlyOrgWithRole middleware to onlyOrgWithPartnerRole

[jdaigneau5]

Closes Issue #1013

Summary

The onlyOrgsWithRole middleware function allowed the BULK_DOWNLOAD organization to access non GET endpoints. This goes against the principle of least privilege, so the middleware was updated to allow only orgs with partner roles, like Cna, Adp, to be granted access.

Important Changes

middleware.js

• Updated onlyOrgsWithRole function to check for orgs with non-partner roles

Testing

Steps to manually test updated functionality, if possible

• 1) Run npm run test:unit-tests
• 2) Ensure orgs with just the BULK_DOWNLOAD role can only access the GET /cve endpoint