KamoCRM

A booking or registration is always a new record in the caller's practice; SI note drafts say so; billing reads write the PHI trail (SITP TP23)

FixSecurityService
Shipped
October 18, 2026 at 9:15 PM UTC
Author
Kamo
Commit
793f620

- SchedulingService.book: the body is the entity, so a uid in it made save() a merge onto that appointment in ANY practice (and moved it into the caller's); status, visit and check-in times in it skipped the desk's transitions. A booking is now always new and 'booked', and names this practice's patient and visit type (404 otherwise). - PatientService.register: the same merge hole for patients; uid and merge fields are cleared. - ClinicalNoteService: a version an SI writes is aiAssisted with its model as aiModelRef, read from the member row (NoteComposer already shows the chip, nothing ever set it); a note is filed under this patient's own visit or none. - ClinicalBillingController: claims, coverage, uncharged procedures and claim lines handed over are written to phi_access_log (purpose PAYMENT, basis PANEL), one batch per answer.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing