Role-based access control (RBAC).
Restricting API endpoints by User Roles (`ROLE_ADMIN`, `ROLE_USER`).