We need to add authorization middleware to our main API so that we can be sure that we can manage user permissions for authenticated users and be able to allow access to certain resources.

Acceptance criteria
We can manage access to resources for autneticated users.

To Do

• add RBAC middleware to httpuitl submodule, we are using Casbin at the moment
• add model and policy files to the repo
• add model and policy files to the IaC
• make sure that application can work with local model and policy as well as be able to take them from the environment varibles

Notes
You can base the solution on how we do things in this package and okapi-public-api, but make sure to add the code to httputil submodule.