hamedandClaude Opus 4.8 6bd49c2d3e fix(security): make commission_percent & active admin-only on PATCH representation ...

A representation editing its own record could raise its own commission or
self-activate (privilege escalation). Restrict both fields to ROLE_ADMIN and
range-check commission (0–100). Owner can still edit name/city/bank.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-28 17:36:48 +03:30

..

admin-ui

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

api

fix(security): make commission_percent & active admin-only on PATCH representation

2026-06-28 17:36:48 +03:30

architecture

feat: insurance & medical billing system (6 phases)

2026-06-23 15:05:24 +03:30

deploy

fix: update references to docker-compose file and remove unused compose files

2026-06-25 21:40:51 +03:30

phase2_taskes

feat: implement realistic data seeding for doctors, clinics, and secretaries

2026-06-15 14:18:25 +03:30

PRD

feat: implement realistic data seeding for doctors, clinics, and secretaries

2026-06-15 14:18:25 +03:30

qa

feat: implement server-side validation for mobile numbers and national codes across multiple endpoints

2026-06-20 12:28:36 +03:30

tasks

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

Architecture_Audit.md

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

ClinicPro_Manual_v2.md

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

DEPLOY.md

harden(docker): non-root, dedicated healthcheck, opcache split, graceful shutdown

2026-06-28 15:27:34 +03:30

security-audit.md

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30