Skip to content

ActivityLogPolicy.canView() comment says "ADMIN only" but correctly allows OWNER and VET #118

Description

@annikaholmqvist94

Body:

Problem

The comment above canView() in ActivityLogPolicy implies the method is
restricted to ADMIN only, but the implementation correctly allows:

  • OWNER to view logs on their own records
  • VET to view logs on same-clinic records
  • ADMIN to view all logs

Fix

Update the comment to accurately describe the actual access rules.
No logic change needed.

Metadata

Metadata

Labels

No labels
No labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions