Body:
Problem
The comment above canView() in ActivityLogPolicy implies the method is
restricted to ADMIN only, but the implementation correctly allows:
- OWNER to view logs on their own records
- VET to view logs on same-clinic records
- ADMIN to view all logs
Fix
Update the comment to accurately describe the actual access rules.
No logic change needed.
Body:
Problem
The comment above canView() in ActivityLogPolicy implies the method is
restricted to ADMIN only, but the implementation correctly allows:
Fix
Update the comment to accurately describe the actual access rules.
No logic change needed.