Added permission checks to all controllers. Added role permission loading. Added frontend permission checks. Implemented user logout in admin panel.

Moonlight.Api/Http/Controllers/Admin/RolesController.cs

@@ -1,8 +1,10 @@
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 using Moonlight.Api.Database;
 using Moonlight.Api.Database.Entities;
 using Moonlight.Api.Mappers;
+using Moonlight.Shared;
 using Moonlight.Shared.Http.Requests;
 using Moonlight.Shared.Http.Requests.Roles;
 using Moonlight.Shared.Http.Responses;
@@ -22,6 +24,7 @@ public class RolesController : Controller
     }
 
     [HttpGet]
+    [Authorize(Policy = Permissions.Roles.View)]
     public async Task<ActionResult<PagedData<RoleDto>>> GetAsync(
         [FromQuery] int startIndex,
         [FromQuery] int length,
@@ -57,6 +60,7 @@ public class RolesController : Controller
 
         // Pagination
         var data = await query
+            .OrderBy(x => x.Id)
             .ProjectToDto()
             .Skip(startIndex)
             .Take(length)
@@ -68,6 +72,7 @@ public class RolesController : Controller
     }
 
     [HttpGet("{id:int}")]
+    [Authorize(Policy = Permissions.Roles.View)]
     public async Task<ActionResult<RoleDto>> GetAsync([FromRoute] int id)
     {
         var role = await RoleRepository
@@ -81,6 +86,7 @@ public class RolesController : Controller
     }
 
     [HttpPost]
+    [Authorize(Policy = Permissions.Roles.Create)]
     public async Task<ActionResult<RoleDto>> CreateAsync([FromBody] CreateRoleDto request)
     {
         var role = RoleMapper.ToEntity(request);
@@ -91,6 +97,7 @@ public class RolesController : Controller
     }
 
     [HttpPatch("{id:int}")]
+    [Authorize(Policy = Permissions.Roles.Edit)]
     public async Task<ActionResult<RoleDto>> UpdateAsync([FromRoute] int id, [FromBody] UpdateRoleDto request)
     {
         var role = await RoleRepository
@@ -108,6 +115,7 @@ public class RolesController : Controller
     }
 
     [HttpDelete("{id:int}")]
+    [Authorize(Policy = Permissions.Roles.Delete)]
     public async Task<ActionResult> DeleteAsync([FromRoute] int id)
     {
         var role = await RoleRepository