@@ -0,0 +23,4 @@
+            {
+                // Mark the requirement as succeeded if the user has the necessary permission
+                context.Succeed(requirement);
+            }

@@ -0,0 +4,4 @@
+    /// Defines the different permissions used in the application.
+    /// Permissions can be used in authorization requirements to control access.
+    /// </summary>
+    /// Note: Should these permissions be defined here, or stored in the database for flexibility?

@@ -0,0 +1,31 @@
+using Microsoft.AspNetCore.Authorization;

@@ -12,0 +30,4 @@
+        ValidAudience = builder.Configuration["Jwt:Audience"],
+        IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(builder.Configuration["Jwt:Key"]))
+    };
+});

@@ -12,0 +45,4 @@
+
+    options.AddPolicy("ProductsEditPolicy", policy =>
+        policy.Requirements.Add(new PermissionRequirement(Permissions.ProductsEdit)));
+});

@@ -118,0 +124,4 @@
+        {
+            builder.Services.AddAuthorization(options =>
+            {
+                options.AddPolicy("UsersReadPolicy", policy =>