feature: phase1 - org-type navigation, Cases permissions, staff filtering, and route guards.

backend/src/modules/treatments/treatments.controller.ts

@@ -17,13 +17,14 @@ import { FilesInterceptor } from '@nestjs/platform-express';
 import { ApiBearerAuth, ApiBody, ApiConsumes, ApiOperation, ApiTags } from '@nestjs/swagger';
 import { memoryStorage } from 'multer';
 import type { Response } from 'express';
+import { ClinicOrgGuard } from '../../common/guards/clinic-org.guard';
 import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
 import { SaveTreatmentDraftDto, SendTreatmentCaseDto } from './dto/treatment.dto';
 import { TreatmentsService } from './treatments.service';
 
 @ApiTags('treatments')
 @ApiBearerAuth('JWT-auth')
-@UseGuards(JwtAuthGuard)
+@UseGuards(JwtAuthGuard, ClinicOrgGuard)
 @Controller('treatments')
 export class TreatmentsController {
   constructor(private readonly treatmentsService: TreatmentsService) {}

backend/src/modules/treatments/treatments.module.ts

@@ -1,10 +1,11 @@
 import { Module } from '@nestjs/common';
 import { PrismaService } from '../../../prisma/prisma.service';
+import { ClinicOrgGuard } from '../../common/guards/clinic-org.guard';
 import { TreatmentsController } from './treatments.controller';
 import { TreatmentsService } from './treatments.service';
 
 @Module({
   controllers: [TreatmentsController],
-  providers: [TreatmentsService, PrismaService],
+  providers: [TreatmentsService, PrismaService, ClinicOrgGuard],
 })
 export class TreatmentsModule {}