improvement: Nothing done is related to subscriptions!!!

backend/src/modules/patients/patients.controller.ts

@@ -25,16 +25,17 @@ export class PatientsController {
   constructor(private readonly patientsService: PatientsService) {}
 
   @Post()
-  @ApiOperation({ summary: 'Create or return existing global patient by mobile' })
+  @ApiOperation({ summary: 'Create or return this clinic’s patient by mobile' })
   create(@Body() createPatientDto: CreatePatientDto, @Req() req) {
     const organizationId = this.patientsService.getOrganizationIdFromUser(req.user);
     return this.patientsService.create(createPatientDto, organizationId);
   }
 
   @Get()
-  @ApiOperation({ summary: 'Search all patients globally' })
-  findAll(@Query() query: ListPatientsDto) {
-    return this.patientsService.findAll(query);
+  @ApiOperation({ summary: 'Search patients created by the current clinic' })
+  findAll(@Query() query: ListPatientsDto, @Req() req) {
+    const organizationId = this.patientsService.getOrganizationIdFromUser(req.user);
+    return this.patientsService.findAll(query, organizationId);
   }
 
   @Get(':id/appointments')
@@ -48,14 +49,20 @@ export class PatientsController {
   }
 
   @Get(':id')
-  @ApiOperation({ summary: 'Get one patient by id' })
-  findOne(@Param('id') id: string) {
-    return this.patientsService.findOne(id);
+  @ApiOperation({ summary: 'Get one patient created by the current clinic' })
+  findOne(@Param('id') id: string, @Req() req) {
+    const organizationId = this.patientsService.getOrganizationIdFromUser(req.user);
+    return this.patientsService.findOne(id, organizationId);
   }
 
   @Patch(':id')
-  @ApiOperation({ summary: 'Update global patient record' })
-  update(@Param('id') id: string, @Body() updatePatientDto: UpdatePatientDto) {
-    return this.patientsService.update(id, updatePatientDto);
+  @ApiOperation({ summary: 'Update a patient created by the current clinic' })
+  update(
+    @Param('id') id: string,
+    @Body() updatePatientDto: UpdatePatientDto,
+    @Req() req,
+  ) {
+    const organizationId = this.patientsService.getOrganizationIdFromUser(req.user);
+    return this.patientsService.update(id, updatePatientDto, organizationId);
   }
 }