Implement role-based access control for healthcare users

[kmuwanga83]

📌 Problem

The system does not clearly enforce user roles such as Admin, Doctor, and Receptionist.

🎯 Objective

Secure the system using role-based access control.

✅ Tasks

• Define roles:
  • Admin
  • Doctor
  • Receptionist
• Restrict access to endpoints based on roles
• Integrate with authentication system (JWT/Spring Security)

🧪 Acceptance Criteria

• Unauthorized users cannot access restricted endpoints
• Role-based permissions are enforced
• Security configuration is documented