# Issue #208: Create RoleMiddleware

## Goal
Create app/Http/Middleware/RoleMiddleware that checks if authenticated user has required role(s). Register in Kernel. Use with routes: Route::middleware(['auth', 'role:admin'])->group().

## Requirements (To-Do)
- [ ] Create RoleMiddleware class
- [ ] Implement role checking logic
- [ ] Support multiple roles (array of roles)
- [ ] Return 403 Forbidden if role check fails
- [ ] Register middleware in Kernel

## Acceptance Criteria
- Middleware correctly checks user role
- Can be used with route groups
- Returns proper error response for unauthorized access
- Supports role:admin and role:admin,supervisor syntax



## Implementation Status
**Status:** ✅ COMPLETED
**Note:** `EnsureAdminUser` middleware exists


## Implementation Status
**✅ COMPLETED**
**Note:** Implemented
## Labels
- type:feature
- priority:high
- module:auth

## Milestone
M1-Foundation
