# TODO - Menu Group Available Menus & Restriction

- [x] Add service method to fetch allowed menu IDs for authenticated user
- [x] Add service method to provide available menu list for a target menu group based on authenticated user access
- [x] Restrict `syncMenus` so assigned menu IDs must be subset of authenticated user allowed menus (except master user)
- [x] Add controller endpoint for `GET /menu-groups/{menu_group}/available-menus`
- [x] Register route for `available-menus` endpoint in `routes/api.php`
- [ ] Run API testing (critical/thorough as requested)