pub fn validate_device_permission(role: &Role, device_id: &str) -> bool
Validate that a role has permission for a specific device