This repository has been archived on 2026-05-24. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Flea Flicker 87c9cac180 feat(gro-48): row-level data scoping for groomer role (RBAC Phase 2) ...

Filter query results at the route handler level when staff role is groomer:

- GET /api/appointments: WHERE staffId = groomer OR batherStaffId = groomer
- GET /api/appointments/🆔 403 if not assigned to groomer (as staff or bather)
- GET /api/clients: Clients with ≥1 appointment for this groomer (via exists subquery)
- GET /api/clients/🆔 403 if no appointment linkage
- GET /api/pets: Pets owned by groomer-linked clients (via exists subquery)
- GET /api/pets/:petId: 403 if no appointment linkage

Managers and receptionists: no change.

Added exists to @groombook/db exports (was missing from re-export).
Added groomerIsolation unit tests for role guard and filter logic.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-03-27 01:08:54 +00:00

..

migrations

fix(gro-38): prod/demo auth and API-based seed (#117)

2026-03-26 20:51:08 +00:00

src

feat(gro-48): row-level data scoping for groomer role (RBAC Phase 2)

2026-03-27 01:08:54 +00:00

drizzle.config.ts

Bootstrap monorepo: Hono API, React PWA, Drizzle DB, CI/CD

2026-03-17 16:11:04 +00:00

package.json

feat: deterministic seed, impersonation migration, test factories (GRO-110)

2026-03-21 19:34:52 +00:00

tsconfig.json

Fix tsconfig rootDir for correct dist output paths

2026-03-18 01:52:26 +00:00