User Story 3 (Anonymous Posting): Issue 3 - Role & Permission Enforcement

[dkhalifa25]

Issue 3: Role & Permission Enforcement

Dependencies: Issue 2 (API)
Milestone: Sprint 1
Description:

• Restrict anonymous posting to student roles.
• Ensure staff/admins can toggle visibility of author info.
• Add audit log entry with true author ID for moderation.

Acceptance Criteria:

• Students can submit anonymous posts.
• Staff see “Anonymous Student” publicly, but can reveal author internally.
• Audit log stores author for all anonymous posts.