Add role-based filtering and imporve code

services/recipes/app/api/recipes.py

@@ -18,9 +18,11 @@ from ..schemas.recipes import (
 )
 from shared.routing import RouteBuilder, RouteCategory
 from shared.auth.access_control import require_user_role
+from shared.security import create_audit_logger, AuditSeverity, AuditAction
 
 route_builder = RouteBuilder('recipes')
 logger = logging.getLogger(__name__)
+audit_logger = create_audit_logger("recipes-service")
 router = APIRouter(tags=["recipes"])
 
 
@@ -193,9 +195,10 @@ async def update_recipe(
 async def delete_recipe(
     tenant_id: UUID,
     recipe_id: UUID,
+    user_id: UUID = Depends(get_user_id),
     db: AsyncSession = Depends(get_db)
 ):
-    """Delete a recipe"""
+    """Delete a recipe (Admin+ only)"""
     try:
         recipe_service = RecipeService(db)
 
@@ -206,10 +209,43 @@ async def delete_recipe(
         if existing_recipe["tenant_id"] != str(tenant_id):
             raise HTTPException(status_code=403, detail="Access denied")
 
+        # Capture recipe data before deletion
+        recipe_data = {
+            "recipe_name": existing_recipe.get("name"),
+            "category": existing_recipe.get("category"),
+            "difficulty_level": existing_recipe.get("difficulty_level"),
+            "ingredient_count": len(existing_recipe.get("ingredients", []))
+        }
+
         success = await recipe_service.delete_recipe(recipe_id)
         if not success:
             raise HTTPException(status_code=404, detail="Recipe not found")
 
+        # Log audit event for recipe deletion
+        try:
+            # Get sync db for audit logging
+            from ..core.database import SessionLocal
+            sync_db = SessionLocal()
+            try:
+                await audit_logger.log_deletion(
+                    db_session=sync_db,
+                    tenant_id=str(tenant_id),
+                    user_id=str(user_id),
+                    resource_type="recipe",
+                    resource_id=str(recipe_id),
+                    resource_data=recipe_data,
+                    description=f"Admin deleted recipe {recipe_data['recipe_name']}",
+                    endpoint=f"/recipes/{recipe_id}",
+                    method="DELETE"
+                )
+                sync_db.commit()
+            finally:
+                sync_db.close()
+        except Exception as audit_error:
+            logger.warning(f"Failed to log audit event: {audit_error}")
+
+        logger.info(f"Deleted recipe {recipe_id} by user {user_id}")
+
         return {"message": "Recipe deleted successfully"}
 
     except HTTPException: