Add Permission Validation for Hybrid User Role Deletion

[BimsaraBodaragama]

Current Limitation

Currently, hybrid user role deletion does not validate user permissions before executing the deletion process. This can lead to unauthorized deletions, and violating role-based access control policies.

Suggested Improvement

• Introduce a method getPermittedUserNamesToBeDeleted to validate and retrieve user names allowed for deletion based on their roles and organizational permissions.
• Enhance the deletion flow to:
  • Validate user permissions for both restricted and unrestricted roles.
  • Ensure only permitted users are deleted.
• Implement SQL queries to:
  • Fetch unrestricted user names (NOT_RESTRICTED).
  • Fetch restricted user names with permitted organizational access (RESTRICTED).
• Handle errors robustly to avoid disruptions in the deletion process.

Version

7.1

[BimsaraBodaragama]

You can track the PR here