Update VaccinationRecordPolicy for manual_record scope

stevehook · stevehook · commit 3dbacde9de3e · 2026-02-19T17:30:47.000Z
Only the `service` scope was permitted to edit vaccination records. This
stopped the final step in the already vaccinated wizard rendering.

Jira-Issue: MAV-3404
diff --git a/app/controllers/draft_vaccination_records_controller.rb b/app/controllers/draft_vaccination_records_controller.rb
@@ -63,7 +63,6 @@ def update
 
     reload_steps
 
-    require 'pry'; binding.pry
     render_wizard @draft_vaccination_record
   end
 
diff --git a/app/policies/vaccination_record_policy.rb b/app/policies/vaccination_record_policy.rb
@@ -27,7 +27,7 @@ def update?
       (
         record.performed_by_user_id == user.id || user.is_nurse? ||
           user.is_prescriber?
-      ) && record.sourced_from_service? &&
+      ) && (record.sourced_from_service? || record.sourced_from_manual_report?) &&
         record.performed_ods_code == user.selected_organisation.ods_code
     elsif team.has_national_reporting_access?
       record.sourced_from_national_reporting? &&

Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@ def update?`
`27`	`27`	`(`
`28`	`28`	`record.performed_by_user_id == user.id \|\| user.is_nurse? \|\|`
`29`	`29`	`user.is_prescriber?`
`30`		`- ) && record.sourced_from_service? &&`
	`30`	`+ ) && (record.sourced_from_service? \|\| record.sourced_from_manual_report?) &&`
`31`	`31`	`record.performed_ods_code == user.selected_organisation.ods_code`
`32`	`32`	`elsif team.has_national_reporting_access?`
`33`	`33`	`record.sourced_from_national_reporting? &&`