// Add inside the existing authenticated web route group.
// Keep the legacy `admin` role behavior; school_admin is limited by SchoolAccessService.
use App\Http\Controllers\SchoolStudentController;

Route::middleware(['auth'])->prefix('dashboard/schools/{school}')->name('schools.students.')->group(function () {
    Route::get('/students', [SchoolStudentController::class, 'index'])
        ->middleware('school.access')->name('index');
    Route::post('/students', [SchoolStudentController::class, 'store'])
        ->middleware('school.access')->name('store');
});
