mirror of
https://github.com/tiennm99/bsk.git
synced 2026-08-03 06:22:04 +00:00
- bsk.doctors table (soft-delete) with RLS: reads for enrolled staff, writes admin-only; user-client writes so RLS is the enforcement point - add / edit / deactivate Server Actions — admin-gated, Zod-validated, audit-logged via log_audit, revalidate the list - doctors admin page (RSC list + inline edit + deactivate) and add form - sidebar nav entry + vi/en strings Establishes the Phase 2 CRUD pattern (RLS gate + defense-in-depth role check + Zod + audit + revalidate) for the remaining core entities.