Azure Functions - Add role-based security for admin methods.

[codingbandit]

Certain methods existing in the Azure Functions need to be further restricted to allow only content administrators permission to maintain content to be presented in the 2wr application. These methods will be called from the admin application.

An admin role should be created for authorization on items such as:

• base kit maintenance (CUD)
• Hazard hunt maintenance (CUD)
• Hazard information maintenance (CUD)

[neelmallepally]

@codingbandit , READ (Get All) will be allowed for all authenticated users not just for Admin role, correct?

[codingbandit]

Hi @neelmallepally - Yes sorry - read should be available for anyone. The creation update and delete should be only available via admin.

[marblekirby]

Hi i see a PR has been merged for this issue, is this issue ready to be closed?

[dpaquette]

@marblekirby This issue is not ready to be closed. We still need to check for the admin role for the items listed above. The API doesn't make those authorization checks yet.