6 Commits

Author	SHA1	Message	Date
admin	7f467600e9	feat(auth): enforce strict branch scoping for branch-assigned HR and staff accounts ... - Introduce authBranchId() helper to resolve assigned branch while allowing company admin/superadmin cross-branch oversight - Restrict branch, department, and employee listings and mutations to assigned branch for branch-scoped accounts - Scope attendance records, biometric logs, leave applications/balances, payslips, shifts, and announcements by assigned branch - Add comprehensive automated feature tests in BranchScopedAccessTest to prevent branch cross-visibility regression	2026-09-10 11:14:24 +08:00
admin	8f078c1f33	Implement HR Branch isolation and Shift isolation	2026-07-14 11:41:04 +08:00
admin	359de36252	Fix LeaveBalanceController query relationship for branch_id	2026-07-06 12:54:40 +08:00
admin	755650c3b3	Fix HR branch isolation for leave balances and attendance records, and separate My Attendance	2026-07-06 12:50:37 +08:00
admin	5b7a41927b	Add Leave Balances and Biometric Attendance menu items for employees and handle view-only permissions	2026-07-01 10:02:32 +08:00
dvappnnt	273c8e8153	initial commit	2026-04-13 08:16:56 +08:00