Bug Details:
Students can create arbitrary pre-bookings without any manager-created special item
Test Case 1:
Step 1: Call the pre-booking endpoint with an arbitrary dish name, meal, and future date.
Step 2: Use a request that does not correspond to any real SpecialItem record.
Expected Output:
The system should only allow tomorrow booking for valid manager-created special items that are actually available.
Actual Output:
The booking succeeded for a custom Injected Custom Item without any SpecialItemId or availability validation.
Bug Details:
Students can create arbitrary pre-bookings without any manager-created special item
Test Case 1:
Step 1: Call the pre-booking endpoint with an arbitrary dish name, meal, and future date.
Step 2: Use a request that does not correspond to any real SpecialItem record.
Expected Output:
The system should only allow tomorrow booking for valid manager-created special items that are actually available.
Actual Output:
The booking succeeded for a custom Injected Custom Item without any SpecialItemId or availability validation.