feature/API-70/adjust-role-guards-permission

[andres15alvarez]

This pull request introduces several changes to enhance role-based access control, improve functionality for branch-specific operations, and refactor the codebase for better modularity and maintainability. The most significant updates include expanding UserRole.BRANCH_ADMIN permissions, adding branch-specific logic to inventory and order operations, and refactoring the order-related services into separate modules.

Role-based Access Control Enhancements:

• Updated @Roles decorators in CouponController, PromoController, and OrderController to include UserRole.BRANCH_ADMIN, granting branch administrators access to create, update, delete, and manage coupons, promos, and orders. [1] [2] [3] [4]

Branch-specific Logic:

• Added branch-specific validation in InventoryController to ensure that branch administrators can only create, update, or delete inventory items for their assigned branch. [1] [2] [3]
• Updated OrderController to restrict branch administrators to managing orders within their branch and added branch ID handling for bulk updates and status changes. [1] [2]

Service Refactoring:

• Refactored the order-related services by splitting OrderService into OrderService and OrderDeliveryService, improving separation of concerns and modularity. Updated relevant imports and constructors in controllers and gateways. [1] [2] [3] [4] [5]

Codebase Simplification:

• Removed the EmailController test file, likely due to redundancy or deprecation.
• Enhanced InventoryService methods to include branch-specific filtering for update and remove operations, ensuring data integrity across branches.

These changes collectively improve the system's security, maintainability, and scalability by enforcing stricter role-based access and modularizing key functionalities.