Commit Graph
4 Commits
Author SHA1 Message Date
Malek TellissiandClaude Sonnet 4.6 1494273efd Add viewer access to records and restrict activity log
Deploy / deploy (push) Successful in 16s
- canView() + canViewAny() in EnforcesRoles: all SMS roles can view
- View pages for all 7 resources so viewers can open records read-only
- Custom ActivityResource restricts activity log to admin + manager only

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-09-13 02:44:00 +02:00
Malek TellissiandClaude Sonnet 4.6 5ea7916a09 Fix EnforcesRolesInRelation method signatures to match RelationManager
Deploy / deploy (push) Successful in 10s
canEdit and canDelete must accept Model $record to match parent class.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-09-13 02:06:01 +02:00
Malek TellissiandClaude Sonnet 4.6 0c44bfa6d0 Implement role-based access control and revert hardcoded OAuth credentials
Deploy / deploy (push) Failing after 12s
- sms-admin: full access (create, edit, delete)
- sms-manager: create and edit only, no delete
- sms-viewer: read-only, all write buttons hidden
- Apply EnforcesRolesInRelation trait to BatchesRelationManager
- Revert Nextcloud OAuth credentials to env vars (OAUTH_CLOUDSPICESBLUE_*)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-09-13 02:03:46 +02:00
Malek TellissiandClaude Sonnet 4.6 2937004118 Roles via Nextcloud groups: sms-admin/manager/viewer + fix OAuth instance_uri
Deploy / deploy (push) Successful in 29s
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-09-13 01:48:24 +02:00