auth layer implemented

Distribution/Features/Ride/RideController.cs

@@ -1,5 +1,6 @@
-using Distribution.Models;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
+using Distribution.Models;
 
 namespace Distribution.Features.Ride;
 
@@ -8,6 +9,7 @@ namespace Distribution.Features.Ride;
 public class RideController(RideService service) : ControllerBase
 {
     [HttpGet]
+    [Authorize("ride.view")]
     public async Task<IActionResult> GetAll(
         [FromQuery] RideStatus? status,
         [FromQuery] Guid? driverProfileId,
@@ -20,6 +22,7 @@ public class RideController(RideService service) : ControllerBase
     }
 
     [HttpGet("{id:guid}")]
+    [Authorize("ride.view")]
     public async Task<IActionResult> GetById(Guid id)
     {
         var result = await service.GetByIdAsync(id);
@@ -27,6 +30,7 @@ public class RideController(RideService service) : ControllerBase
     }
 
     [HttpPost]
+    [Authorize("ride.manage")]
     public async Task<IActionResult> Create(CreateRideRequest request, CancellationToken ct)
     {
         try
@@ -38,6 +42,7 @@ public class RideController(RideService service) : ControllerBase
     }
 
     [HttpPut("{id:guid}/driver")]
+    [Authorize("ride.manage")]
     public async Task<IActionResult> AssignDriver(Guid id, AssignRideDriverRequest request, CancellationToken ct)
     {
         try
@@ -50,6 +55,7 @@ public class RideController(RideService service) : ControllerBase
     }
 
     [HttpPost("{id:guid}/close")]
+    [Authorize("ride.manage")]
     public async Task<IActionResult> Close(Guid id, CloseRideRequest request, CancellationToken ct)
     {
         try
@@ -62,6 +68,7 @@ public class RideController(RideService service) : ControllerBase
     }
 
     [HttpPost("{id:guid}/cancel")]
+    [Authorize("ride.manage")]
     public async Task<IActionResult> Cancel(Guid id, CancelRideRequest request, CancellationToken ct)
     {
         try