Marc-André Bombeck 5d6216a59f fix(labs): resolve biomarker delete through the record-scoped labs authority ...

DELETE /api/biomarkers/{id} used a bare requireAuth() while the PUT beside
it requires requireRecordAuth("manage", "labs"). The delete now uses the
same authority and, as a manage-level hard delete, files what it destroyed
(name, unit, reading count) through destroyedDetails.

2026-10-15 20:24:00 +02:00

..

fixtures

fix(labs): resolve biomarker delete through the record-scoped labs authority

2026-10-15 20:24:00 +02:00

integration

fix(labs): resolve biomarker delete through the record-scoped labs authority

2026-10-15 20:24:00 +02:00