feat(appointment-settings): let clinics manage each member doctor's booking

The API and React components were already parameterized by doctor uuid, but 14
copy-pasted identity checks limited every endpoint to "the doctor themselves or
an admin", so a clinic owner could not touch a member doctor's booking setup.

- Replaces those 14 checks with one denyDoctorAccess() that also admits the
  owner of a clinic the doctor belongs to, and a member doctor holding the
  clinic's appointment_settings permission (view for GET, update for writes).
  A doctor's own settings short-circuit before any permission lookup.
- Moves ScheduleSection and its tabs out of DoctorDetailPage into
  components/schedule/ScheduleSection.tsx so the doctor panel and the new
  clinic page render the same module instead of one page importing another.
  Pure relocation — no logic changed.
- Adds ClinicAppointmentSettingsPage: one tab per clinic doctor, each rendering
  that same section. The tab wrapper is keyed by doctor uuid so in-progress
  schedule edits cannot leak onto the wrong doctor.
- insurance-pricing accepts an optional doctor_uuid (query on GET, body on PUT)
  under the same access rule, so the visit-price card works inside the clinic
  tabs. Fixes saveInsurancePricing calling getInsurancePricing with the wrong
  argument by extracting the shared pricingPayload().

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

This commit is contained in:

hamed

2026-07-18 10:02:27 +03:30

co-authored by

Claude Opus 4.8

parent e4ddd38f0c

commit c103c393f3

13 changed files with 1773 additions and 1364 deletions

									
										assets/admin/pages/AppointmentSettingsPage.tsx
									
		+1
		-1
	
												View File
												
				@@ -1,7 +1,7 @@

				import { useAuthStore } from '../stores/authStore';

				import SettingsLayout from '../components/layout/SettingsLayout';

				import FreeVisitPrice from '../components/FreeVisitPrice';

				import { ScheduleSection } from './DoctorDetailPage';

				import { ScheduleSection } from '../components/schedule/ScheduleSection';

				/**

				 * مدیریت نوبت دهی — the doctor's appointment settings: visit price and the full