hamed 934405c42d feat: Implement permission gate for appointment and billing controllers ...

- Added PermissionGateTrait to manage access control for AppointmentPlanController and BillingController.
- Introduced denyUnlessGrantedForPlanning method in AppointmentPlanController to handle specific permission checks for planning appointments.
- Updated existing methods in both controllers to utilize the new permission checks.
- Refactored ResourcePermissionTrait to use PermissionGateTrait for cleaner permission management.
- Added tests to ensure proper permission enforcement across different scenarios, including cross-tenant access restrictions for staff.

2026-08-08 10:27:13 +03:30

..

Captcha

Add AST cache files for AltchaService, API documentation, and AltchaService tests

2026-07-10 11:42:23 +03:30

AdminCspSubscriberTest.php

feat: enhance security audit and CSP configuration for admin interface

2026-07-23 14:12:05 +03:30

ApiLeastPrivilegeTest.php

feat: Implement permission gate for appointment and billing controllers

2026-08-08 10:27:13 +03:30

CorsRegexEnvProcessorTest.php

Add CorsRegexEnvProcessor and corresponding tests

2026-07-07 14:58:41 +03:30

DbLoggerTest.php

feat(logging): Implement database logging with app_log table

2026-06-29 20:01:03 +03:30

DisplayNameTest.php

feat(validation): enforce naming rules for doctors and clinics to prevent placeholders

2026-07-19 08:38:11 +03:30

EntityContextResolverTest.php

refactor(tenant): give every table one spelling of the tenant pair

2026-07-28 11:56:57 +03:30

ErrorCodesTest.php

refactor(errors): centralise legacy string error codes in ErrorCodes (M21)

2026-06-28 21:12:23 +03:30

HealthControllerTest.php

feat: update allowed frontend hosts and add clinic-pro.ir domain

2026-07-21 16:51:42 +03:30

MaintenanceModeTest.php

feat(config): add central maintenance mode

2026-07-19 22:01:34 +03:30

NumericFieldNormalizerTest.php

feat(availability): multi-resource availability engine

2026-07-30 21:21:33 +03:30

PermissionCatalogApiTest.php

feat(permissions): expose the registry over GET /api/v1/permission-catalog

2026-08-07 17:39:45 +03:30

PermissionCatalogTest.php

fix(permissions): make the addresses resource real instead of decorative

2026-08-07 19:16:02 +03:30

PermissionRegistryEntityTest.php

feat(permissions): single registry for secretary and clinic-doctor permissions

2026-08-07 17:32:28 +03:30

PersianTextTest.php

feat: unify doctor title handling and enhance specialty selection

2026-07-19 19:57:03 +03:30

RequestReachableChildTenantTest.php

feat(tenant): give a tenant pair to the children reachable by a request uuid

2026-07-28 16:50:51 +03:30

TenantDumpCommandTest.php

chore(tenant): audit the paths the filter cannot reach

2026-07-28 12:46:30 +03:30

TenantFilterLeakTest.php

feat(tenant): enforce environment isolation in the ORM layer

2026-07-28 12:27:27 +03:30

TenantIsolationMatrixTest.php

refactor(tenant): give every table one spelling of the tenant pair

2026-07-28 11:56:57 +03:30

TenantLookupInventoryTest.php

refactor(pricing): make the service the only price source

2026-08-02 18:00:48 +03:30

TenantOwnershipCheckerTest.php

fix(tenant): check the environment wherever a uuid comes from the request

2026-07-28 13:39:59 +03:30

TenantSchemaCoverageTest.php

feat(tenant): mark the financial tables with their owning environment

2026-07-28 15:06:28 +03:30

TimeIntervalTest.php

feat(resource): calendar UI, holiday admin, backfill and interval algebra

2026-07-30 18:28:48 +03:30

TimezoneTest.php

feat(timezone): implement Tehran timezone handling across the application

2026-07-16 00:25:21 +03:30

UserCollisionRetryTest.php

feat(availability): resource ordering strategies, and a real fix for the flaky suite

2026-07-31 20:21:16 +03:30