chore: cleanup after master flatten rewrite

2026-03-17 09:44:50 +01:00
parent 99483b3506
commit 00df76269a
2 changed files with 3 additions and 5 deletions
@@ -886,10 +886,9 @@ Keys stored in `config/secret/` directory.

 **Location:** `src/Security/Voter/BookingVoter.php`

-| Operation | Requirements |
-|-----------|--------------|
-| `VIEW` | User owns booking (addressId match) |
-| `EDIT` | User owns booking AND booking is editable |
+This voter currently exists as legacy authorization logic and is not actively invoked by booking controllers.
+
+Current booking routes (`/bookings/*`) are guarded with `ROLE_USER`, while final document access checks are enforced by BusProNet.

 ### 7.4 OAuth2