ServiceError::LoggedInUserNotFound => StatusCode::UNAUTHORIZED, // 401

ServiceError::UnauthorizedActiognForGuests => StatusCode::UNAUTHORIZED, // 401

pub async fn authorize(&self, action: ACTION, maybe_user_id: Option<UserId>) -> std::result::Result<(), ServiceError> {
    let role = self.get_role(maybe_user_id).await;

    let enforcer = self.casbin_enforcer.enforcer.read().await;

    let authorize = enforcer
        .enforce((role, action))
        .map_err(|_| ServiceError::UnauthorizedAction)?;

    if authorize {
        Ok(())
    } else {
        Err(ServiceError::UnauthorizedAction)
    }
}

pub async fn authorize(&self, action: ACTION, maybe_user_id: Option<UserId>) -> std::result::Result<(), ServiceError> {
    let role = self.get_role(maybe_user_id).await;

    let enforcer = self.casbin_enforcer.enforcer.read().await;

    let authorized = enforcer
        .enforce((role, action))
        .map_err(|_| ServiceError::UnauthorizedAction)?;

    if authorized {
        Ok(())
    } else {
        if role == Role::guest {
            Err(ApiError::UserCredentialsRequired) // Guest users are not authorized for this action
        } else {
            Err(ServiceError::UnauthorizedAction) // Authenticated user lacks necessary permissions
        }
    }
}