Update Saqel Platform: 2026-09-08 13:43:36

backend/app/Middlewares/RoleGuard.php

@@ -0,0 +1,25 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Middlewares;
+
+use App\Core\Request;
+use App\Core\Response;
+
+final class RoleGuard
+{
+    /** @param list<string> $allowedRoles */
+    public static function requireAny(Request $request, Response $response, array $allowedRoles): void
+    {
+        $role = $request->role;
+        if ($role === null || !in_array($role, $allowedRoles, true)) {
+            $response->status(403)->json([
+                'status' => 'error',
+                'error' => 'Forbidden',
+                'message' => 'لا تملك الصلاحية اللازمة لتنفيذ هذه العملية.',
+            ]);
+            exit;
+        }
+    }
+}