Marc-André Bombeck 3ad8332e66 test(vaccinations): prove the managed-profile and scoped-grant record paths ...

Two record-scope properties through the real routes and a real Postgres. A
Guardian standing inside a managed profile writes a dose against the resolved
record — the profile's rows, never the Guardian's own — and reads it straight
back. A delegate holding a profile READ grant on an ordinary record lists and
reads the doses but is refused the PATCH with a 403, the escalation stopped at
the manage check before the row is looked up, and the row is left untouched.

2026-08-08 23:00:39 +02:00

..

fixtures/v137

test(vaccinations): reconcile the structural guards with the new surfaces

2026-08-08 21:43:28 +02:00

integration

test(vaccinations): prove the managed-profile and scoped-grant record paths

2026-08-08 23:00:39 +02:00