hamed 093293004a fix(security): enforce ownership on GET date-override (IDOR) ...

getOverride leaked any doctor's override to any authenticated user; add the
owner-or-admin check (matching the update/delete endpoints) + regression test.

2026-06-28 16:48:41 +03:30

..

Command

feat(appointment): auto-expire unpaid bookings via Symfony Scheduler

2026-06-15 22:43:50 +03:30

Controller

fix(security): enforce ownership on GET date-override (IDOR)

2026-06-28 16:48:41 +03:30

Entity

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Message

feat(appointment): auto-expire unpaid bookings via Symfony Scheduler

2026-06-15 22:43:50 +03:30

MessageHandler

feat(appointment): auto-expire unpaid bookings via Symfony Scheduler

2026-06-15 22:43:50 +03:30

Repository

feat(rating): multi-dimensional ratings, rich comments, eligibility guard

2026-06-16 00:25:59 +03:30

Service

fix: store appointment address from schedule and auto-add patient to clinic

2026-06-23 16:10:36 +03:30