Skip to main content
Source snapshot: 13 October 2026. These pages describe the current implementation, including unfinished controls. See coverage and review notes.

​
Health and support

Host: admin.<ROOT_DOMAIN> · Route: /[tenant]/health-support

​
Purpose and access

Review confidential member health cases and household welfare needs. The page explicitly identifies health.view as its access requirement.You need an account session and a resolved membership context in the selected Mahallu (including the API’s current platform elevation path). The API independently checks the requested operation’s permissions and feature availability.

​
Screen layout

The register has summary statistics, condition filters, search, and Active Welfare Aid, Chronic Illness & Medicine, Disability Register, Care & Bedridden, and Welfare Households views.

​
Fields and displayed information

​
Fields and filters: Health support client

​
Actions

​
Linked navigation

​
Interaction sequence

Choose a case category → filter by condition or search → open the linked member or household → edit the underlying health or welfare profile there.

​
States and rules

Without health.view the page shows Restricted Access. Member and household lists have separate empty messages. The initial requests load up to 100 records per list; the view does not implement a separate medical case creation form.

​
Implementation references

Paths below are relative to the application repository. This is source-reviewed behavior, not a recorded browser test.
  • apps/web/src/app/sites/admin/[tenant]/health-support/page.tsx
  • apps/web/src/app/sites/admin/[tenant]/health-support/health-support-client.tsx
Data and access helpers: apps/web/src/lib/session.ts, apps/web/src/lib/server-api.ts, apps/web/src/lib/tenants.ts, apps/web/src/lib/health-support.ts, apps/web/src/lib/members.ts, apps/web/src/lib/business-resources.tsRelevant controller permission keys: health.view, health.manage. Keys are operation-specific; the current guard grants OWNER/ADMIN and its platform-elevation context an operational bypass. A visible control still does not establish authorization.

​
API behavior references

  • apps/api/src/members/education-employment.controller.ts
  • apps/api/src/members/health-support.controller.ts
  • apps/api/src/members/members.controller.ts
  • apps/api/src/families/families.controller.ts