A code review flags a "protected" admin endpoint. The controller has @UseGuards(RolesGuard) on the class, RolesGuard injects a UserService to check role hierarchy, and it's registered application-wide with app. useGlobalGuards(new RolesGuard(reflector, userService)) in main.
Source: [Dev.to](https://dev.to/parsajiravand/nestjs-guards-canactivate-executioncontext-reflector-1onm)