From 2502b7c68f887b96ac456019f6c2a0771e3a38b5 Mon Sep 17 00:00:00 2001
From: Methapon2001 <61303214+Methapon2001@users.noreply.github.com>
Date: Wed, 5 Mar 2025 08:49:27 +0700
Subject: [PATCH] fix: scope permission

---
 src/controllers/00-stats-controller.ts | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/controllers/00-stats-controller.ts b/src/controllers/00-stats-controller.ts
index 6db8ca4..8963099 100644
--- a/src/controllers/00-stats-controller.ts
+++ b/src/controllers/00-stats-controller.ts
@@ -449,7 +449,14 @@ export class StatsController extends Controller {
             data: await tx.payment
               .groupBy({
                 _sum: { amount: true },
-                where: { createdAt: { gte: v, lte: date.endOf("month").toDate() } },
+                where: {
+                  createdAt: { gte: v, lte: date.endOf("month").toDate() },
+                  invoice: {
+                    quotation: {
+                      registeredBranch: { OR: permissionCondCompany(req.user) },
+                    },
+                  },
+                },
                 by: "paymentStatus",
               })
               .then((v) =>