Fix/role based endpoint rules#216

Merged

annikaholmqvist94 merged 19 commits into

mainfrom

fix/role-based-endpoint-rules

Apr 21, 2026

Commits on Apr 19, 2026

feat: refine SecurityConfig with role-based access rules and VET/ADMIN policies
annikaholmqvist94
committed
refactor: simplify MedicalRecordPolicy rules for OWNER role
annikaholmqvist94
committed
test: add unit tests for MedicalRecordPolicy permissions
annikaholmqvist94
committed
test: adjust VetIntegrationTest to use user authorities and refine admin policy verification
annikaholmqvist94
committed
fix: enhance OWNER role validation in MedicalRecordPolicy to ensure record and pet ownership alignment
annikaholmqvist94
committed
refactor: update SecurityConfig to refine VET/ADMIN and OWNER role access rules
annikaholmqvist94
committed
feat: add CommentType enum to define comment categories
annikaholmqvist94
committed
feat: add `type` field to Comment entity to classify comment types
annikaholmqvist94
committed
feat: add `comment_type` column to `comment` table to classify comments
annikaholmqvist94
committed
feat: add `type` field to CommentResponse DTO for comment classification
annikaholmqvist94
committed
feat: add visibility rule for VET_CLINICAL_NOTE in CommentPolicy
annikaholmqvist94
committed
feat: update CommentService to enforce comment visibility and set type based on user role
annikaholmqvist94
committed
feat: update AttachmentPolicy to allow OWNER role to delete their own uploads
annikaholmqvist94
committed
test: update MedicalRecordPolicyTest to refine OWNER role create/update validation logic
annikaholmqvist94
committed
test: add isVisibleTo tests in CommentPolicyTest to validate VET_CLINICAL_NOTE visibility rules
annikaholmqvist94
committed
test: add unit tests in CommentServiceTest to cover type assignment and visibility filtering logic
annikaholmqvist94
committed

Commits on Apr 21, 2026