user affiliation schema completed

backend/routes/api/user-affiliations.php

@@ -0,0 +1,21 @@
+<?php
+
+use App\Http\Controllers\UserAffiliationController;
+use Illuminate\Support\Facades\Route;
+
+// Prefisso `api` e stack `api` applicati dal loader in bootstrap/app.php.
+
+// Lettura: pubblica con throttling.
+Route::middleware('throttle:public')->group(function () {
+    Route::apiResource('user-affiliations', UserAffiliationController::class)->only(['index', 'show']);
+});
+
+// Scrittura + soft delete: utente pienamente operativo (non riservata all'Admin,
+// a differenza di institutions/institution-categories).
+Route::middleware('tier.app')->group(function () {
+    Route::apiResource('user-affiliations', UserAffiliationController::class)->only(['store', 'update', 'destroy']);
+
+    // Soft delete: ripristino e cancellazione definitiva (binding sui cestinati).
+    Route::post('user-affiliations/{user_affiliation}/restore', [UserAffiliationController::class, 'restore'])->withTrashed();
+    Route::delete('user-affiliations/{user_affiliation}/force', [UserAffiliationController::class, 'forceDestroy'])->withTrashed();
+});