Fix nurse onboarding redirects and specialty Documents 404s.

Resolve staff memberships by invite/demo email as well as public_id so nurses stay on their employer org; block staff from owner onboarding; keep Documents viewable with module access while upload stays manage-gated. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-18 19:09:06 +00:00
parent 656f402e8f
commit c3219a1bf1
7 changed files with 524 additions and 14 deletions
@@ -25,6 +25,11 @@ class EnsureOrganizationSetup
        }

        if (! $this->organizations->isOnboarded($user)) {
+            // Staff already attached to a tenant must not see owner onboarding.
+            if ($this->organizations->membershipFor($user)) {
+                abort(403, 'Your facility setup is incomplete. Ask an administrator to finish onboarding.');
+            }
+
            return redirect()->route('care.onboarding.show');
        }