kavehhn
cbcf3f55db
fix(perm): allow array of permissions in permissionMiddleware and accept classes:update or classes:delete
2026-08-21 13:35:16 +03:30
kavehhn
72be01fee3
feat: add messaging toggles, password reset SMS, and payment discounts
...
Allow SuperAdmin to disable SMS, email, and bot from dashboard settings on top of env flags. Add admin password reset with credentials SMS, plus payment discounts, notes, and payable amount handling.
2026-08-16 06:58:08 +03:30
kavehhn
1ef54ad414
fix: stream FilePond uploads to S3 and proxy private file previews
...
Disk-based multer plus an authenticated content endpoint match the working Node.js uploader and avoid browser signed-URL failures on SeaweedFS.
2026-08-15 18:46:26 +03:30
kavehhn
877dfa65d5
fix: treat SuperAdmin role name case-insensitively in permission checks
...
The seeded role is SuperAdmin, but the middleware only matched superAdmin, so SuperAdmin could be denied documents and other new permissions.
2026-08-15 03:27:21 +03:30
kavehhn
bf5e66fa95
feat: add append-only course/user data import and expand user profile
...
Support uploading structured JSON to create courses, classes, and students without wiping existing data, and merge user name fields while adding gender and registration details from source sheets.
2026-08-15 01:31:44 +03:30
kavehhn
35704409ec
feat: bootstrap SuperAdmin from env and lock one-time seeding
...
Production creates the SuperAdmin from env credentials, and dashboard seeding is authenticated, SuperAdmin-only, and locked after the first run.
2026-08-14 23:23:06 +03:30
kavehhn
f04c797be6
Initial commit: teaching institution management API.
...
Express/MongoDB backend with JWT auth, RBAC, S3 uploads, notifications, and scheduled jobs.
2026-08-09 04:18:08 +02:00
kavehhn