Add role-based filtering and imporve code

services/inventory/app/api/ingredients.py

@@ -22,12 +22,16 @@ from app.schemas.inventory import (
 from shared.auth.decorators import get_current_user_dep
 from shared.auth.access_control import require_user_role, admin_role_required, owner_role_required
 from shared.routing import RouteBuilder
+from shared.security import create_audit_logger, AuditSeverity, AuditAction
 
 # Create route builder for consistent URL structure
 route_builder = RouteBuilder('inventory')
 
 router = APIRouter(tags=["ingredients"])
 
+# Initialize audit logger
+audit_logger = create_audit_logger("inventory-service")
+
 # Helper function to extract user ID from user object
 def get_current_user_id(current_user: dict = Depends(get_current_user_dep)) -> UUID:
     """Extract user ID from current user context"""
@@ -264,6 +268,25 @@ async def hard_delete_ingredient(
     try:
         service = InventoryService()
         deletion_summary = await service.hard_delete_ingredient(ingredient_id, tenant_id)
+
+        # Log audit event for hard deletion
+        try:
+            await audit_logger.log_deletion(
+                db_session=db,
+                tenant_id=str(tenant_id),
+                user_id=current_user["user_id"],
+                resource_type="ingredient",
+                resource_id=str(ingredient_id),
+                resource_data=deletion_summary,
+                description=f"Hard deleted ingredient and all associated data",
+                endpoint=f"/ingredients/{ingredient_id}/hard",
+                method="DELETE"
+            )
+        except Exception as audit_error:
+            import structlog
+            logger = structlog.get_logger()
+            logger.warning("Failed to log audit event", error=str(audit_error))
+
         return deletion_summary
     except ValueError as e:
         raise HTTPException(