hamed 093293004a fix(security): enforce ownership on GET date-override (IDOR) ...

getOverride leaked any doctor's override to any authenticated user; add the
owner-or-admin check (matching the update/delete endpoints) + regression test.

2026-06-28 16:48:41 +03:30

..

DateOverrideOwnershipTest.php

fix(security): enforce ownership on GET date-override (IDOR)

2026-06-28 16:48:41 +03:30

ScheduleOwnershipTest.php

fix(security): enforce ownership on GET weekly-schedule (IDOR)

2026-06-28 16:47:05 +03:30