Project

General

Profile

Edit Copy Actions

Feature #9522

open

Backend: field-staff access guards on job/project endpoints + customer role fix

Added by Anonymous about 1 month ago. Updated about 1 month ago.

Status:
New
Priority:
Normal
Target version:
-
Start date:
06/29/2026
Due date:
% Done:

100%

Estimated time:
8:00 h

Description

Added access-control checks so field staff can only view or update jobs, surveys, and projects they are actually assigned to, closing a gap where job/project detail and status-update endpoints didn't verify assignment before returning data. Also fixed the customer role casing used when issuing login tokens, and added a new endpoint to fetch available inventory product types.


Add

Subtasks


Add

Related issues

Edit Copy Actions

Also available in: Atom PDF