tenant-admin-crud

name	tenant-admin-crud
description	Use when building tenant-admin CRUD flows for branches, staff, services, clients, schedules, and other salon-owned operational resources.

Tenant Admin CRUD

Use this skill for the internal panel of each salon.

Read first

1. docs/memory/active-context.md
2. docs/blueprints/development-roadmap.md
3. docs/decisions/ADR-0002-multi-tenancy-and-panels.md
4. docs/engineering/development-best-practices.md

Workflow

1. Decide whether the record is tenant-owned or branch-owned.
2. Scope the resource query to the authenticated tenant.
3. Keep tenant_id off the form unless there is a compelling internal reason.
4. Set tenant ownership server-side.
5. Add branch filters and status filters where they help operation.
6. Add positive and negative tests for panel access and data isolation.

Rules

• no unscoped Model::query() for tenant-owned resources
• no trusting route parameters alone for ownership
• no resource callback with hidden business logic if an action class is clearer
• every destructive action should be authorization-aware