Scope staff Care queries to the organization owner_ref.

Demo doctors were querying their own public_id, so branches/patients/queues looked empty even though the Pro tenant had data. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-18 06:20:31 +00:00
parent e62cb24bfc
commit 5264035705
5 changed files with 131 additions and 3 deletions
@@ -149,13 +149,13 @@ class MemberController extends Controller
        $this->authorizeAbility($request, 'admin.members.manage');
        $this->authorizeOwner($request, $member);

-        abort_if($member->user_ref === $this->ownerRef($request), 422, 'You cannot remove yourself.');
+        abort_if($member->user_ref === $this->actorRef($request), 422, 'You cannot remove yourself.');

        $memberId = $member->id;
        $organizationId = $member->organization_id;
        $member->delete();

-        AuditLogger::record($this->ownerRef($request), 'member.deleted', $organizationId, $this->ownerRef($request), Member::class, $memberId);
+        AuditLogger::record($this->ownerRef($request), 'member.deleted', $organizationId, $this->actorRef($request), Member::class, $memberId);

        return redirect()->route('care.members.index')->with('success', 'Member removed.');
    }