Category creation should have permissions

.changeset/calm-hairs-kneel.md

@@ -0,0 +1,5 @@
+---
+'@procore-oss/backstage-plugin-announcements-backend': patch
+---
+
+Adding permission checks to category creation.

plugins/announcements-backend/src/service/router.ts

@@ -178,6 +178,10 @@ export async function createRouter(
   router.post(
     '/categories',
     async (req: Request<{}, {}, CategoryRequest, {}>, res) => {
+      if (!(await isRequestAuthorized(req, announcementCreatePermission))) {
+        throw new NotAllowedError('Unauthorized');
+      }
+
       const category = {
         ...req.body,
         ...{