Fix grower save bug, add name sorting, and clarify status meanings

- #155: Remove service-layer permission check from UpdateGrowerAsync and
  align the PUT controller endpoint to use EditModule policy (matching
  the POST). The extra IsAuthorized call in the service returned null
  for users without explicit module Edit permission, producing the
  'Unable to save changes' error.

- #161: Add ORDER BY GrowerName to all grower list queries in the
  repository so the list is consistently alphabetical across filters.

- #149: Add tooltip (title attribute) to status badges in Grower Index
  and Edit pages explaining the difference between Active, Inactive,
  and Exited so users understand what each status means on hover.

https://claude.ai/code/session_013s3rc5YSBFQ5U9Ef1bH13c

Author: claude

Client/Modules/Grower/Edit.razor

@@ -29,7 +29,11 @@ else
                 @if (_growerId > 0)
                 {
                     <div class="d-flex align-items-center gap-2 flex-wrap">
-                        <span class="badge @GetStatusBadgeClass(_grower.Status)">@GetStatusText(_grower.Status)</span>
+                        <span class="badge @GetStatusBadgeClass(_grower.Status)"
+                              title="@GetStatusDescription(_grower.Status)"
+                              aria-label="Status: @GetStatusText(_grower.Status) — @GetStatusDescription(_grower.Status)">
+                            @GetStatusText(_grower.Status)
+                        </span>
                         @if (UserSecurity.IsAuthorized(PageState.User, AppRoleNames.TenTreesAdmin))
                         {
                             @if (_grower.Status == GrowerStatus.Active)
@@ -360,7 +364,7 @@ else
                                         {
                                             <span class="badge bg-secondary me-1">General</span>
                                         }
-                                        <small class="text-muted">@note.CreatedOn.ToLocalTime().ToString("yyyy-MM-dd HH:mm") — @note.CreatedBy</small>
+                                        <small class="text-muted">@note.CreatedOn.ToLocalTime().ToString("yyyy-MM-dd HH:mm") � @note.CreatedBy</small>
                                     </div>
                                     <div class="text-body" style="white-space: pre-wrap;">@note.Text</div>
                                 </li>
@@ -657,4 +661,12 @@ else
         GrowerStatus.Exited => "Exited",
         _ => status.ToString()
     };
+
+    private string GetStatusDescription(GrowerStatus status) => status switch
+    {
+        GrowerStatus.Active => "Currently participating in the program.",
+        GrowerStatus.Inactive => "Temporarily paused (e.g. illness or travel) but has not left the program.",
+        GrowerStatus.Exited => "Has permanently left the program.",
+        _ => string.Empty
+    };
 }

Client/Modules/Grower/Index.razor

@@ -123,7 +123,8 @@
                         <td>@grower.GrowerName</td>
                         <td>@GetVillageName(grower.VillageId)</td>
                         <td>
-                            <span class="badge @GetStatusBadgeClass(grower.Status)">
+                            <span class="badge @GetStatusBadgeClass(grower.Status)"
+                                  title="@GetStatusDescription(grower.Status)">
                                 @GetStatusText(grower.Status)
                             </span>
                         </td>
@@ -342,6 +343,14 @@
         };
     }
 
+    private string GetStatusDescription(GrowerStatus status) => status switch
+    {
+        GrowerStatus.Active => "Currently participating in the program.",
+        GrowerStatus.Inactive => "Temporarily paused (e.g. illness or travel) but has not left the program.",
+        GrowerStatus.Exited => "Has permanently left the program.",
+        _ => string.Empty
+    };
+
     private async Task DeleteGrower(Models.Grower grower)
     {
         try

Server/Controllers/GrowerController.cs

@@ -179,7 +179,7 @@ public async Task<ActionResult<GrowerStatusSummary>> GetStatusSummary(int? villa
         }
 
         [HttpPut("{id}")]
-        [Authorize]
+        [Authorize(Policy = PolicyNames.EditModule)]
         public async Task<ActionResult<Models.Grower>> Put(int id, [FromBody] Models.Grower grower, int moduleId)
         {
             try

Server/Repository/GrowerRepository.cs

@@ -58,32 +58,32 @@ public Models.Grower GetGrower(int growerId, bool tracking)
                 query = query.Where(g => g.VillageId == villageId.Value);
             }
 
-            return query.ToList();
+            return query.OrderBy(g => g.GrowerName).ToList();
         }
 
         public IEnumerable<Models.Grower> GetGrowersByVillage(int villageId)
         {
             using var db = _factory.CreateDbContext();
-            return db.Grower.Where(g => g.VillageId == villageId).ToList();
+            return db.Grower.Where(g => g.VillageId == villageId).OrderBy(g => g.GrowerName).ToList();
         }
 
         public IEnumerable<Models.Grower> GetGrowersByMentor(string mentorUsername)
         {
             using var db = _factory.CreateDbContext();
-            return db.Grower.Where(g => g.MentorUsername == mentorUsername).ToList();
+            return db.Grower.Where(g => g.MentorUsername == mentorUsername).OrderBy(g => g.GrowerName).ToList();
         }
 
         public IEnumerable<Models.Grower> GetGrowersByStatus(GrowerStatus status, int? villageId = null)
         {
             using var db = _factory.CreateDbContext();
             var query = db.Grower.Where(g => g.Status == status);
-            
+
             if (villageId.HasValue)
             {
                 query = query.Where(g => g.VillageId == villageId.Value);
             }
-            
-            return query.ToList();
+
+            return query.OrderBy(g => g.GrowerName).ToList();
         }
 
         public IEnumerable<Models.Grower> GetActiveGrowers(int? villageId = null)

Server/Services/GrowerService.cs

@@ -178,16 +178,8 @@ public Task<GrowerStatusSummary> GetStatusSummaryAsync(int? villageId = null)
 
         public Task<Models.Grower> UpdateGrowerAsync(Models.Grower grower, int moduleId)
         {
-            if (_userPermissions.IsAuthorized(_accessor.HttpContext.User, _alias.SiteId, EntityNames.Module, moduleId, PermissionNames.Edit))
-            {
-                grower = _growerRepository.UpdateGrower(grower);
-                _logger.Log(LogLevel.Information, this, LogFunction.Update, "Grower Updated {Grower}", grower);
-            }
-            else
-            {
-                _logger.Log(LogLevel.Error, this, LogFunction.Security, "Unauthorized Grower Update Attempt {Grower}", grower);
-                grower = null;
-            }
+            grower = _growerRepository.UpdateGrower(grower);
+            _logger.Log(LogLevel.Information, this, LogFunction.Update, "Grower Updated {Grower}", grower);
             return Task.FromResult(grower);
         }