Expand moderator roles by adding SCOPE_mod permission and updating authorization logic.

backend/src/main/java/com/alttd/altitudeweb/controllers/event/EventController.java

@@ -42,7 +42,7 @@ public class EventController {
         }
 
         List<String> authorities = jwt.getClaimAsStringList("authorities");
-        if (authorities == null || !authorities.contains(PermissionClaimDto.HEAD_MOD.getValue())) {
+        if (authorities == null || doesNotHavePermission(authorities)) {
             throw new ResponseStatusException(HttpStatus.FORBIDDEN);
         }
 
@@ -64,4 +64,8 @@ public class EventController {
 
         return eventPublisher.subscribe(new EventUser(subject, authorities), json);
     }
+
+    private static boolean doesNotHavePermission(List<String> authorities) {
+        return !authorities.contains(PermissionClaimDto.HEAD_MOD.getValue()) && !authorities.contains(PermissionClaimDto.MOD.getValue());
+    }
 }