Add role-based filtering and imporve code

services/production/app/api/production_schedules.py

@@ -10,7 +10,9 @@ from uuid import UUID
 import structlog
 
 from shared.auth.decorators import get_current_user_dep
+from shared.auth.access_control import require_user_role
 from shared.routing import RouteBuilder
+from shared.security import create_audit_logger, AuditSeverity, AuditAction
 from app.core.database import get_db
 from app.services.production_service import ProductionService
 from app.schemas.production import (
@@ -24,6 +26,9 @@ logger = structlog.get_logger()
 route_builder = RouteBuilder('production')
 router = APIRouter(tags=["production-schedules"])
 
+# Initialize audit logger
+audit_logger = create_audit_logger("production-service")
+
 
 def get_production_service() -> ProductionService:
     """Dependency injection for production service"""
@@ -125,13 +130,14 @@ async def get_production_schedule_details(
     route_builder.build_base_route("schedules"),
     response_model=ProductionScheduleResponse
 )
+@require_user_role(['admin', 'owner'])
 async def create_production_schedule(
     schedule_data: ProductionScheduleCreate,
     tenant_id: UUID = Path(...),
     current_user: dict = Depends(get_current_user_dep),
     production_service: ProductionService = Depends(get_production_service)
 ):
-    """Generate or manually create a daily/shift schedule"""
+    """Generate or manually create a daily/shift schedule (Admin+ only)"""
     try:
         schedule = await production_service.create_production_schedule(tenant_id, schedule_data)
 
@@ -153,6 +159,7 @@ async def create_production_schedule(
     route_builder.build_resource_detail_route("schedules", "schedule_id"),
     response_model=ProductionScheduleResponse
 )
+@require_user_role(['admin', 'owner'])
 async def update_production_schedule(
     schedule_update: ProductionScheduleUpdate,
     tenant_id: UUID = Path(...),
@@ -160,7 +167,7 @@ async def update_production_schedule(
     current_user: dict = Depends(get_current_user_dep),
     production_service: ProductionService = Depends(get_production_service)
 ):
-    """Edit schedule before finalizing"""
+    """Edit schedule before finalizing (Admin+ only)"""
     try:
         schedule = await production_service.update_production_schedule(tenant_id, schedule_id, schedule_update)