Feature #9522
openBackend: field-staff access guards on job/project endpoints + customer role fix
Start date:
06/29/2026
Due date:
% Done:
100%
Estimated time:
8:00 h
Description
Added access-control checks so field staff can only view or update jobs, surveys, and projects they are actually assigned to, closing a gap where job/project detail and status-update endpoints didn't verify assignment before returning data. Also fixed the customer role casing used when issuing login tokens, and added a new endpoint to fetch available inventory product types.
Subtasks
Related issues