Right now, every user created is automatically assigned the Client role. There should be a way for Admin users to assign roles during registration.
Suggested Actions:
Add an optional role field in the user creation request body.
Implement authorization logic so only Admin users can assign the Admin role.
Update the validation layer to prevent unauthorized role assignment.
Right now, every user created is automatically assigned the Client role. There should be a way for Admin users to assign roles during registration.
Suggested Actions: