HD Sports Zone Bookmark 25L-5 — Employee Access Preview Checklist / Enforcement Prep

Read-only checklist for reviewing employee access preview results before any future enforcement work. This phase does not enforce permissions, change auth, edit middleware, write data, expose employee names/emails, change schedules, send notifications, or touch payroll, Time Clock rules, POS shifts, reservations, payments, waivers, customer profiles, exports, PDFs, CSVs, schedule locking, or hard schedule blocking.

Access Checklist Access Preview Print Packet Mapping Audit Scheduling Hub Guard Design
Builder Help Strip

Manager build workflow: Build → Review → Publish → Employee View

Quick links are consolidated here so managers do not have to hunt through the larger navigation. This strip is visual only. It does not change saves, publishing, schedule rows, employee views, notifications, locking, payroll, Time Clock, POS, reservations, payments, waivers, or customer profiles.

1. Build Use existing builder.
2. Draft Draft until published.
3. Review Check conflicts.
4. Publish Existing publish flow.
5. Employees Published self-view.
Manager Schedule Builder — Safe Workflow

Build here. Review conflicts before publishing. Employees view only published schedules.

Use this screen for the existing manager build workflow. Before publishing, review unavailable blocks and soft conflicts. After publishing, employees should use the Employee Portal, My Schedule, Weekly Schedule, or Print Weekly.

Phase 25P-1 only adds clarity and support links. It does not change draft saves, publishing, schedule locking, employee text/email notifications, payroll, Time Clock, POS shifts, reservations, payments, waivers, or customer profiles.

1. Build Use the current builder workflow.
2. Review Check unavailable blocks and soft conflicts.
3. Publish Publish only after manager review.
4. Employee View Employees use published self-view pages.
Draft Status / Publish Readiness

Treat this as draft work until the manager intentionally publishes it.

Before publishing, confirm the date range, employee coverage, shift times, and soft conflicts. Once published, employees should use the Employee Portal and self-view pages for their final schedule.

Phase 25P-2 adds labels and readiness guidance only. It does not change save buttons, publish buttons, schedule rows, draft data, published data, employee visibility, notifications, locking, payroll, Time Clock, POS shifts, reservations, payments, waivers, or customer profiles.

Draft Build and review shifts here.
Coverage Confirm staff, roles, dates, and times.
Conflict Review Review soft conflicts before publish.
Published Employees use published self-view pages.
Publish Review Reminder

Review soft conflicts before publishing this schedule.

Before the manager publishes, check unavailable blocks, appointments, manager holds, duplicate shift issues, and any soft conflicts. Conflicts are still review warnings only; this does not hard-block scheduling.

Phase 25P-3 adds this publish-review callout only. It does not change save buttons, publish buttons, draft rows, published rows, employee visibility, schedule locking, employee text/email notifications, payroll, Time Clock, POS shifts, reservations, payments, waivers, or customer profiles.

Unavailable Review unavailable blocks.
Appointments Check appointment overlap.
Manager Holds Review manager holds.
Coverage Check staff coverage.
Publish Publish after review.
Employee View Reminder

Employees should view published schedules only from Employee Portal.

After the manager publishes, employees should use Employee Portal, My Schedule, Weekly Schedule, or Print Weekly. Managers should avoid sending employees to builder, diagnostics, route catalogs, checklists, or developer tools.

Phase 25P-4 adds this reminder only. It does not change publish behavior, employee schedule data, employee permissions, schedule locking, employee text/email notifications, payroll, Time Clock, POS shifts, reservations, payments, waivers, or customer profiles.

Draft Manager-only build work.
Review Conflicts and coverage.
Publish Existing manager action.
Employee View Published self-view pages.
Employee Scheduling
Production Home Visual Cleanup Completion Data Readiness Inventory Data Source Map Save/Publish Action Inventory Production Form Map Draft Save Preflight Draft Save UX Guidance Create / Edit Schedule Review Conflicts Publish Published Schedule Print Employee Portal My Schedule Help
Admin / Diagnostics Diagnostic/build pages remain available for troubleshooting, but they are intentionally separated from daily manager and employee workflow. Manager Simple Menu Developer Tools Navigation Smoke Test Navigation Completion Builder Inventory Builder Route Catalog Builder Workflow Guide Builder Checklist Builder Diagnostics Builder Completion Builder Screen Cleanup Draft Status Clarity Soft Conflict Reminder Employee View Reminder Builder Help Strip

Checklist Summary

No enforcement is active. This page is only a review checklist before designing a future employee access guard/helper.

Generated Jun 4, 2026 11:26 PM

Read Only Checklist Mode

No permissions, middleware, auth, or data are changed.

1 Required Items Needing Review

Required checklist items still marked for manager/developer review.

1 Available Mapping Paths

Mapping paths where both schedule and identity columns exist.

1 Strong Mapping Paths

Mapping paths with 95%+ distinct identity coverage.

0 Critical Route Issues

Critical access-preview routes not detected.

0/3 File/Table Issues

Missing expected files / missing expected tables.

Preserved Boundaries

Read-only checklist No permission enforcement No auth config changes No middleware changes No database writes No migrations No employee PII output No route deletion No page deletion No schedule edits No published schedule edits No draft schedule edits No employee texts No employee emails No notifications No payroll changes No Time Clock rules changes No POS shifts changes No reservations changes No payments changes No waivers changes No customer profile changes No exports generated No PDF generation No CSV export No schedule locking No hard schedule blocking changes

Readiness Checklist

Section Required Status Item Why Open
Mapping Confirmation Required Ready Candidate Confirm which mapping path should be used for employee self-view access. Employee-only filtering must use the correct relationship before enforcement. Open
Preview Review Required Ready Candidate Review Access Preview with at least one anonymized identity bucket. Managers should verify that the filtered schedule view looks correct before enforcement. Open
Print Review Helpful Ready Candidate Print or review the Access Preview Print Packet. A print packet gives managers a simple sign-off reference before enforcement prep. Open
Portal Continuity Required Ready Candidate Confirm Employee Portal, My Schedule, Weekly View, and Weekly Print still open. Future enforcement should not break employee-facing published schedule views. Open
Manager Fallback Required Needs Review Keep manager/admin preview available even after employee self-view access is enforced later. Managers need a safe troubleshooting path if an employee cannot see a shift. Open
Safety Required Ready Candidate Confirm no employee texts/emails/notifications should be enabled yet. Notification logic should only come after access behavior is correct. Open
Safety Required Ready Candidate Confirm no payroll, Time Clock, POS shift, reservation, payment, waiver, customer profile, export, or locking connection is part of access enforcement prep. The access module must remain isolated from restricted modules. Open

Mapping Health

Mapping Confidence Status Distinct Shift Values Matched Values Coverage
Published Shifts user_id → Users id
hd_published_shifts.user_id → users.id 		High Unavailable 0 0 0.0%
Published Shifts employee_id → Employees id
hd_published_shifts.employee_id → employees.id 		High Unavailable 0 0 0.0%
Published Shifts employee_id → HD Employees id
hd_published_shifts.employee_id → hd_employees.id 		High Strong 1 1 100.0%
Published Shifts staff_id → Staff id
hd_published_shifts.staff_id → staff.id 		Medium Unavailable 0 0 0.0%
Published Shifts staff_id → HD Staff id
hd_published_shifts.staff_id → hd_staff.id 		Medium Unavailable 0 0 0.0%
Published Shifts user_id → Employees user_id
hd_published_shifts.user_id → employees.user_id 		Medium Unavailable 0 0 0.0%
Published Shifts user_id → HD Employees user_id
hd_published_shifts.user_id → hd_employees.user_id 		Medium Unavailable 0 0 0.0%

Manager Review Checklist

  1. Open Mapping Audit and confirm the recommended mapping path makes sense.
  2. Open Access Preview and review at least one anonymized identity bucket.
  3. Confirm the previewed schedule looks like one employee’s published schedule, not everyone’s schedule.
  4. Confirm soft conflict notes are informational only and do not block shifts.
  5. Confirm employees should not access draft, publish, diagnostic, route catalog, audit, or completion pages.
  6. Confirm managers still need full preview and troubleshooting access.
  7. Confirm no employee texts or emails should be sent yet.

Developer Prep Checklist

  1. Do not implement enforcement in this checklist phase.
  2. Choose one mapping path before writing middleware or query filters.
  3. Keep future enforcement reversible and isolated.
  4. Keep manager/admin bypass or preview path available.
  5. Add route/middleware checks before any future enforcement is switched on.
  6. Add a safe fallback message for employees with no mapped identity.
  7. Do not expose employee names or emails in diagnostic pages unless explicitly required later.

Do Not Do Yet

These items are intentionally not part of this phase.
  • Do not add employee-only middleware yet.
  • Do not edit config/auth.php yet.
  • Do not change guards, providers, policies, or roles yet.
  • Do not modify existing employee portal query behavior yet.
  • Do not hide manager routes yet.
  • Do not create mapping records yet.
  • Do not send notifications, texts, or emails.
  • Do not touch payroll, Time Clock rules, POS shifts, reservations, payments, waivers, customer profiles, exports, PDFs, CSVs, schedule locking, or hard blocking.

Future Enforcement Plan

Step Future Stage Description
1 Confirm Mapping Choose the final relationship: user_id, employee_id, staff_id, or a bridge column.
2 Create Preview Middleware / Helper Build helper logic first without applying it to live routes.
3 Add Employee-Safe Query Filter Filter published shifts only after the logged-in employee identity can be resolved.
4 Keep Manager/Admin Override Managers and admins should retain preview access for troubleshooting.
5 Smoke Test Before Enforcing Verify employee portal, My Schedule, Weekly, Print, and manager routes before enabling enforcement.

Route Checks

Area Critical Method Status URI
Access Preview Checklist Critical GET Detected hd/employee-schedules/access-preview/checklist
Employee Portal Access Preview Checklist Critical GET Detected hd/employee-schedules/employee-portal/access-preview/checklist
Access Preview Print Critical GET Detected hd/employee-schedules/access-preview/print
Access Preview Critical GET Detected hd/employee-schedules/access-preview
User Mapping Audit Critical GET Detected hd/employee-schedules/user-mapping-audit
Access Prep Optional GET Detected hd/employee-schedules/access-prep
Scheduling Hub Critical GET Detected hd/employee-schedules/hub
Employee Portal Critical GET Detected hd/employee-schedules/employee-portal
My Schedule Critical GET Detected hd/employee-schedules/employee-portal/my-schedule
Weekly View Critical GET Detected hd/employee-schedules/employee-portal/weekly
Weekly Print Optional GET Detected hd/employee-schedules/employee-portal/weekly/print

Controller / View / Route File Checks

File Status
Access Preview Checklist Controller
/home/at4txjiyemp4/public_html/hdsportszone.com/app/Http/Controllers/Hd/EmployeeSchedules/EmployeeScheduleAccessPreviewChecklistController.php 		Present
Access Preview Checklist View
/home/at4txjiyemp4/public_html/hdsportszone.com/resources/views/hd/employee_schedules/navigation/access_preview_checklist.blade.php 		Present
Access Preview Print Controller
/home/at4txjiyemp4/public_html/hdsportszone.com/app/Http/Controllers/Hd/EmployeeSchedules/EmployeeScheduleAccessPreviewPrintController.php 		Present
Access Preview Controller
/home/at4txjiyemp4/public_html/hdsportszone.com/app/Http/Controllers/Hd/EmployeeSchedules/EmployeeScheduleAccessPreviewController.php 		Present
User Mapping Audit Controller
/home/at4txjiyemp4/public_html/hdsportszone.com/app/Http/Controllers/Hd/EmployeeSchedules/EmployeeScheduleUserMappingAuditController.php 		Present
Clean Navigation Partial
/home/at4txjiyemp4/public_html/hdsportszone.com/resources/views/hd/employee_schedules/_clean_nav.blade.php 		Present
Navigation Route File
/home/at4txjiyemp4/public_html/hdsportszone.com/routes/hd_employee_schedule_navigation.php 		Present

Table Checks

Table Status Rows Purpose
Users
users 		Present 0 Possible login identity source.
Employees
employees 		Not Detected 0 Possible employee profile source.
HD Employees
hd_employees 		Present 4 Possible HD employee profile source.
Staff
staff 		Not Detected 0 Possible staff profile source.
HD Staff
hd_staff 		Not Detected 0 Possible HD staff profile source.
Published Shifts
hd_published_shifts 		Present 1 Employee portal published shift source.
Published Schedule Periods
hd_published_schedule_periods 		Present 1 Published period source.

Next Recommended Phase

25L-6 — Employee Access Guard Design / No Enforcement
Recommended next phase can design the future guard/helper structure without applying enforcement to live routes yet.
  1. Keep it read-only/design-only.
  2. Document the selected mapping and fallback behavior.
  3. Do not apply middleware to employee portal routes yet.
  4. Do not change auth config yet.
  5. Do not write mapping data.
  6. Do not send notifications or touch payroll, Time Clock, POS shifts, reservations, payments, waivers, customer profiles, exports, or locking.