melabidi/laravel_school_api_old
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

inti project

Browse Source
This commit is contained in:
root
2026-05-29 04:33:03 -04:00
commit cdeab1796f
699 changed files with 20516 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/release/security-readiness.md
+15
View File
@@ -0,0 +1,15 @@
# Security Readiness Review
Required checks before production rollout:
- Cross-school access tests pass.
- Wrong-role access tests pass.
- Payment file access is payment-scoped and authorized.
- Bulk communication requires preview and confirmation token.
- Report export requires explicit export permission.
- Extension routes require `islamic_sunday_school` domain profile.
- Sensitive Islamic Sunday School profile fields require explicit permission.
- Provider callbacks are signature-verified where applicable.
- Risky endpoints have rate limits.
High-risk extension data includes imam/admin sensitive notes, Qur'an/Arabic/Islamic studies placement details, scholarship/sadaqah support indicators, family/community profile notes, and guardian contact information.