ismail
e5705a1b1c
All checks were successful
Build and Push Docker Image / build (push) Successful in 2m8s
Isolation test: HH-N admin vs E2E-HOSP data across 5 scenarios. Found + fixed 3 real isolation gaps: 1. observation_list LEAKED unassigned observations across hospitals — the filter Q(assigned_department__hospital=X) | Q(assigned_department__isnull=True) showed ALL unassigned observations globally. Fixed: add hospital= filter to the isnull branch. 2. complaint_add_note allowed cross-hospital note creation — ComplaintService.add_note had no hospital check. Any authenticated user from any hospital could add notes to any complaint. Fixed: added hospital isolation check (same hospital or px_admin). 3. observation_detail accessible cross-hospital when assigned_department is null — the RBAC check only ran if observation.assigned_department was set. Fixed: added fallback hospital check for observations with no department. Result: 16 PASS, 0 FAIL, 0 isolation violations. Tested: list isolation (8 modules), detail isolation (3), write isolation (2), px_admin hospital switching, observation no-dept edge case.