fix: add role guard to user officer proposals table

[ChongJiaChua]

Closes UserOfficeProject/issue-tracker/issues/990

Description

Currently, unauthorized roles could access the ProposalTableOfficer component by navigating to the /Proposals route manually. This change makes it such only the User Officer and Proposal Reader roles are allowed to access it. Any unauthorized roles attempting to access the /Proposals route directly will be redirected back to the main dashboard (/)

Motivation and Context

How Has This Been Tested

Fixes

Changes

Frontend AppRoutes.tsx:

• Added conditional guards based on user roles (isUserOfficer || isProposalReader)
• Added a fallback route for /Proposals that redirects unauthorized roles back to /

Depends on

Tests included/Docs Updated?

• I have added tests to cover my changes.
• All relevant doc has been updated

noticed something

[YufanKambang]

The client side for the code can still be affected. Not sure if this is needed but making sure that the at the API layer that supplies data to /Proposals page, also check for the correct roles of the user.

This exists here:

user-office-core/apps/backend/src/queries/ProposalQueries.ts

Line 104 in 045dd10

@Authorized([Roles.USER_OFFICER, Roles.PROPOSAL_READER])

it is defended

[ChongJiaChua]

The client side for the code can still be affected. Not sure if this is needed but making sure that the at the API layer that supplies data to /Proposals page, also check for the correct roles of the user.

This exists here:

user-office-core/apps/backend/src/queries/ProposalQueries.ts

Line 104 in 045dd10

@Authorized([Roles.USER_OFFICER, Roles.PROPOSAL_READER])

it is defended

Yeap, the backend already prevented unauthorised users from accessing the data so this PR just stops them from navigating to the page.