feat: revamp authorization mechanism across app

src/services/courses/activities/pdf.py

@@ -1,4 +1,4 @@
-from src.security.security import verify_user_rights_with_roles
+from src.security.rbac.rbac import authorization_verify_based_on_roles
 from src.services.courses.activities.uploads.pdfs import upload_pdf
 from src.services.users.users import PublicUser
 from src.services.courses.activities.activities import ActivityInDB
@@ -16,6 +16,10 @@ async def create_documentpdf_activity(
 ):
     activities = request.app.db["activities"]
     courses = request.app.db["courses"]
+    users = request.app.db["users"]
+
+    # get user
+    user = await users.find_one({"user_id": current_user.user_id})
 
     # generate activity_id
     activity_id = str(f"activity_{uuid4()}")
@@ -64,16 +68,14 @@ async def create_documentpdf_activity(
         updateDate=str(datetime.now()),
     )
 
-    hasRoleRights = await verify_user_rights_with_roles(
-        request, "create", current_user.user_id, activity_id, element_org_id=org_id
+    await authorization_verify_based_on_roles(
+        request,
+        current_user.user_id,
+        "create",
+        user["roles"],
+        activity_id,
     )
 
-    if not hasRoleRights:
-        raise HTTPException(
-            status_code=status.HTTP_409_CONFLICT,
-            detail="Roles : Insufficient rights to perform this action",
-        )
-
     # create activity
     activity = ActivityInDB(**activity_object.dict())
     await activities.insert_one(activity.dict())