Implement role-based access control for Blazor pages

[hoeyi]

Statement

As an admin, I want to define and assign access permissions to users so that I can control access to pages and features within the app.

Description

Implement a role-based access control system for the pages in the app. It would be helpful if the role definition could be fine-grained down to pages, but simple admin/viewer/editor roles will suffice.

Acceptance Criteria

Describe the conditions by which this requirement will be satisfied.

• Managing Users: Admins can assign roles to users.

  • Admins can view a list of users and their current roles.
  • Admins can add/remove roles to/from users that govern page and function access.
  
  

• Role-Specific Access: Users can only access pages their assigned roles grant.

  • Users are restricted from accessing features that are not allowed for their roles.
  
  

• Auditing and Reporting: Admins can view audit logs of role assignment and access attempts.

  • Admins can view a log of all role assignments and changes.
  
  

[hoeyi]

Deferring the following for later features:

• Custom role creation.
• Access attempt logging and unauthorized access mitigation measures.
• Enforced logins (e.g., cookie expiration such that a new login is required).