bcb9c86541
pre dep
2026-04-09 13:46:34 +03:00
177a7e0f5f
updates
2026-04-08 17:13:35 +03:00
23d439f5a5
fix: harden multi-tenant data isolation across 8 modules
...
Pre-production security fixes to prevent cross-hospital data leaks:
- Standards API: add get_queryset() filtering by department__hospital
- Reports service: add user param with hospital filtering to all querysets
- RCA views: replace is_superuser with tenant_hospital pattern, add access
checks to all 11 mutation views
- Notifications views: replace is_superuser patterns with _get_notification_hospital
helper across all 5 settings functions
- Appreciation API: add tenant_hospital fallback to AppreciationViewSet,
AppreciationStatsViewSet, and LeaderboardView
- AI Analytics: add tenant_hospital fallback in ExecutiveSummaryGenerator and
ActionRecommendationEngine
- SourceUserRestrictionMiddleware: remove None from ALLOWED_URL_NAMES
- Complaint export: fix nullable patient/due_at/description crashes in CSV
and Excel export, fix invalid get_category_display/get_source_display calls
E2E test updates:
- Update isolation gap tests to actively assert hospital filtering
- Fix CSV export test to use API context for download handling
- Switch clinical-staff tests to serial mode to prevent race conditions
2026-04-07 01:23:10 +03:00
6b51b0870d
More updates
2026-03-28 14:03:56 +03:00
Marwan Alwali
3c2593de78
Merge remote-tracking branch 'origin/main'
...
# Conflicts:
# data.json
2026-03-16 02:12:48 +03:00
0fc06151eb
data
2026-03-15 23:48:45 +03:00
1091dcdfde
Fix remaining syntax errors in physicians/ui_views.py - remove orphaned lines
2026-03-11 01:37:32 +03:00
ba63f8f1c6
Fix orphaned lines and undefined variables in physicians ui_views.py
2026-03-11 01:33:11 +03:00
3b9468748c
Fix syntax errors in forms.py files
2026-03-11 01:26:19 +03:00
da0ca4ee19
Fix hospital fields in forms - Add HospitalFieldMixin and update templates
...
PHASE 1: Add HospitalFieldMixin to forms without it
- apps/complaints/forms.py: SLAConfigForm, EscalationRuleForm
- apps/feedback/forms.py: FeedbackForm
- apps/rca/forms.py: RootCauseAnalysisForm
PHASE 2: Update templates to conditionally hide hospital field labels
- templates/complaints/complaint_form.html
- templates/complaints/inquiry_form.html
- templates/complaints/complaint_threshold_form.html
- templates/complaints/escalation_rule_form.html
- templates/feedback/feedback_form.html
PHASE 3: Remove redundant manual hospital filtering code
- Removed manual __init__ hospital logic from forms now using mixin
Behavior:
- PX Admin: Sees hospital dropdown (can select any hospital)
- Hospital Admin/Staff: Hospital field hidden, auto-set to their hospital
- Cleaner code: Mixin handles all role-based filtering automatically
2026-03-11 01:19:41 +03:00
b57ce661bb
Clean up redundant hospital filtering in views
...
Removed ~300 lines of redundant hospital filtering code from views.
Templates no longer use hospital dropdowns, so views don't need to:
- Query Hospital.objects.filter()
- Apply RBAC filtering to hospitals queryset
- Pass hospitals to context
The middleware (TenantMiddleware) already handles hospital filtering
via request.tenant_hospital for all users.
Files cleaned:
- apps/surveys/ui_views.py
- apps/callcenter/ui_views.py
- apps/complaints/ui_views.py
- apps/analytics/ui_views.py
- apps/physicians/ui_views.py
- apps/projects/ui_views.py
- apps/feedback/views.py
- apps/dashboard/views.py
- apps/journeys/ui_views.py
- apps/appreciation/ui_views.py
2026-03-11 00:49:42 +03:00
c16e410fdd
Remove hospital dropdowns from templates and fix JavaScript dependencies
2026-03-11 00:17:53 +03:00
Marwan Alwali
b383991053
Merge remote-tracking branch 'origin/main'
...
# Conflicts:
# apps/dashboard/views.py
# config/celery.py
2026-03-10 19:42:39 +03:00
01fa26c59a
updates
2026-03-09 16:10:24 +03:00
Marwan Alwali
fa966a3574
Merge remote-tracking branch 'origin/main'
2026-02-25 21:20:10 +03:00
ceae6c5009
update
2026-02-25 08:24:43 +03:00
d787d41bc9
export
2026-02-25 08:15:25 +03:00
b3d9bd17cb
more changes
2026-02-25 04:47:05 +03:00
Marwan Alwali
cce11c0f62
Merge remote-tracking branch 'origin/main'
...
# Conflicts:
# PX360/settings.py
# config/settings/base.py
# templates/layouts/partials/sidebar.html
2026-02-22 10:14:03 +03:00
39b1dcb8c0
lots of updates
2026-02-22 08:35:53 +03:00
4f2c8e2dbb
changes to tik tok
2026-02-12 15:09:48 +03:00
72dd1e8e3c
more updates in complaint and survey
2026-02-10 12:33:31 +03:00
3c44f28d33
survey charts and analytics
2026-01-25 10:39:37 +03:00
42cf7bf8f1
update on the surevey
2026-01-24 15:27:30 +03:00
3ce62d80e1
small changes
2026-01-24 15:27:27 +03:00
9d586a4ed3
update on the complaint sla and staff hierarchy
2026-01-24 15:26:30 +03:00
65490078bb
update the complaint and inquiry creation for the source user
2026-01-24 15:25:53 +03:00
d0a2d5db7b
standards app done
2026-01-24 15:24:58 +03:00
aac8698df4
update on the complaint sla and staff hierarchy
2026-01-24 15:24:39 +03:00
dcb6455819
update the complaint and inquiry creation for the source user
2026-01-24 15:13:14 +03:00
4dd3c3e505
standards app done
2026-01-24 15:07:27 +03:00
Marwan Alwali
7d6d75b10b
update-admin-stuff
2026-01-21 14:27:29 +03:00
Marwan Alwali
9d694c7ab3
Merge remote-tracking branch 'origin/main'
...
# Conflicts:
# apps/accounts/admin.py
2026-01-18 14:05:58 +03:00
Marwan Alwali
524efbead9
update-po-file
2026-01-18 14:04:23 +03:00
6f2c783577
update on the complaint and fix merge conflict
2026-01-15 15:25:09 +03:00
e3b3490bc9
update on the complaint sla and staff hierarchy
2026-01-15 15:22:57 +03:00
8b65f9a52e
update the complaint and inquiry creation for the source user
2026-01-15 15:07:32 +03:00
90dd2a66af
standards app done
2026-01-15 15:02:42 +03:00
1f9d8a7198
update on the complaint sla and staff hierarchy
2026-01-15 14:32:49 +03:00
ec675dbc4e
social and source app
2026-01-15 14:31:58 +03:00
Marwan Alwali
02984811ab
update
2026-01-13 17:01:46 +03:00
Marwan Alwali
d7847da450
update
2026-01-12 13:20:34 +03:00
350607d0cc
update on the staff model
2026-01-12 12:19:19 +03:00
3a1910a617
temp commit
2026-01-12 12:08:18 +03:00
Marwan Alwali
867f60fed7
update
2026-01-08 20:56:18 +03:00
Marwan Alwali
1ae0e763be
update
2026-01-08 10:34:08 +03:00
97de5919f2
add reference and standard
2026-01-08 09:50:46 +03:00
Marwan Alwali
5bb2abf8bb
update
2026-01-06 18:39:09 +03:00
9fbc94cddd
update new
2026-01-06 18:31:37 +03:00
fe0f2c5cea
update in forms
2026-01-06 18:26:17 +03:00
