3 Commits

Author	SHA1	Message	Date
Saufi	c9b50ccc5e	feat: two-role system — super_admin & admin program (Fasa 12) ... - Replace is_admin boolean with role enum('super_admin','admin') via migration - ProgramPolicy: admin program can only view/edit/delete own programs - EnsureIsAdmin: accepts both roles; EnsureSuperAdmin: super_admin only - UserController + views: super_admin can manage admin accounts - Sidebar: user management link & role badge gated on isSuperAdmin() - Fix Controller base class: add AuthorizesRequests trait - Fix tests: replace nonAdmin() (invalid enum) with adminProgram() against super_admin-only route Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-18 08:47:58 +08:00
Saufi	a41ff59009	feat: security hardening (Fasa 10) ... - EnsureIsAdmin middleware: gates all admin routes on is_admin flag - Apply admin middleware to entire admin route group - Fix questionnaire resource route parameter name mismatch ({set}) - Audit log on questionnaire confirmation Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-16 23:54:11 +08:00
Saufi	5b85822b78	chore: initial Laravel 13 project setup for eCert MBIP ... - Laravel 13.9 + PHP 8.5 + MySQL - Bootstrap 5.3 + jQuery 3.7 + Chart.js (replacing Alpine/Tailwind) - Packages: intervention/image, dompdf, simple-qrcode, league/csv, laravel/breeze, laravel/boost - 17 database migrations: users, programs, qr_codes, participants, attendances, certificates, questionnaires, email_logs, audit_logs - 13 Eloquent models with full relationships - Admin layout (Bootstrap 5 sidebar) + public layout (mobile-first) - Rate limiters: checkin (60/min), certificate (30/min) - Admin seeder: admin@mbip.gov.my - Storage directories + symlink configured Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-16 15:44:19 +08:00