fix: scope permission

2025-03-05 08:49:27 +07:00 · 2025-03-05 08:49:27 +07:00 · 2502b7c68f
commit 2502b7c68f
parent 5c58953820
1 changed files with 8 additions and 1 deletions
--- a/src/controllers/00-stats-controller.ts
+++ b/src/controllers/00-stats-controller.ts
@ -449,7 +449,14 @@ export class StatsController extends Controller {
            data: await tx.payment
              .groupBy({
                _sum: { amount: true },
-                where: { createdAt: { gte: v, lte: date.endOf("month").toDate() } },
+                where: {
+                  createdAt: { gte: v, lte: date.endOf("month").toDate() },
+                  invoice: {
+                    quotation: {
+                      registeredBranch: { OR: permissionCondCompany(req.user) },
+                    },
+                  },
+                },
                by: "paymentStatus",
              })
              .then((v) =>