hamed 90736c8149 fix(security): enforce ownership on GET weekly-schedule (IDOR) ...

getSchedule returned any doctor's schedule to any authenticated user — the
mutation endpoints (update/delete) already checked owner-or-admin but this GET
did not. Add the same check + regression test (fails without the fix).

2026-06-28 16:47:05 +03:30

..

Admin/Controller

feat(migrations): add national_code_verified flag to users and normalize bank_account representation

2026-06-25 19:38:47 +03:30

Appointment

fix(security): enforce ownership on GET weekly-schedule (IDOR)

2026-06-28 16:47:05 +03:30

Auth

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Billing

feat(claims): enhance claims filtering with insurance, date range, and patient search

2026-06-24 06:19:25 +03:30

Blog

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Category/Controller

feat: add OpenAPI tags to various controllers for improved API documentation

2026-06-15 14:54:10 +03:30

Clinic

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

ClinicInvitation

feat: Add tagging system for SMS logs and templates

2026-06-19 20:42:04 +03:30

ClinicService

feat(tariffs): automate current year tariff registration and sync service price

2026-06-24 04:54:56 +03:30

Config

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Controller

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

Dashboard/Controller

feat: add OpenAPI tags to various controllers for improved API documentation

2026-06-15 14:54:10 +03:30

Doctor

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

DoctorService

feat: add OpenAPI tags to various controllers for improved API documentation

2026-06-15 14:54:10 +03:30

Entity

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

Insurance

feat(insurance): add insurance coverage flag to selected services and update coverage logic

2026-06-24 06:09:05 +03:30

Location

feat: add OpenAPI tags to various controllers for improved API documentation

2026-06-15 14:54:10 +03:30

Patient

feat(profile): enhance national_code uniqueness error message with masked mobile number

2026-06-24 12:16:16 +03:30

Payment

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Rating

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Repository

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

Representation

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Secretary

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Settlement

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Shared

feat(migrations): add national_code_verified flag to users and normalize bank_account representation

2026-06-25 19:38:47 +03:30

Sms

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Specialty

feat(specialty): public doctor-counts endpoint (per city)

2026-06-16 22:27:27 +03:30

Staff

feat: add OpenAPI tags to various controllers for improved API documentation

2026-06-15 14:54:10 +03:30

Subscription

feat: add OpenAPI tags to various controllers for improved API documentation

2026-06-15 14:54:10 +03:30

Tag

feat: add OpenAPI tags to various controllers for improved API documentation

2026-06-15 14:54:10 +03:30

UserProfile

fix(orm): declare repositoryClass on all entities with a custom repository

2026-06-28 16:19:07 +03:30

Kernel.php

feat: Implement SMS sending functionality with KavehNegar and Rangineh providers

2026-06-09 22:00:34 +03:30

Schedule.php

refactor(scheduler): use the recipe's default stateful schedule

2026-06-15 22:47:38 +03:30