chamomind/jws-backend
chamomind/jws-backend
7
0
Fork 0
Code Issues Projects 1 Releases Packages 1 Wiki Activity Actions

feat: do not allow sale to delete data
All checks were successful
Spell Check / Spell Check with Typos (push) Successful in 5s
Details

Browse source
This commit is contained in:
Methapon2001 2025-07-04 13:31:01 +07:00
parent ced55b9518
commit 2b255ff355
3 changed files with 4 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/controllers/05-payment-controller.ts
View file

@ -35,8 +35,6 @@ const MANAGE_ROLES = [
"branch_admin",
"branch_manager",
"branch_accountant",
"head_of_sale",
"sale",
];
function globalAllow(user: RequestWithUser["user"]) {
@ -112,7 +110,7 @@ export class QuotationPayment extends Controller {
}
@Put("{paymentId}")
@Security("keycloak")
@Security("keycloak", MANAGE_ROLES.concat(["head_of_sale", "sale"]))
async updatePayment(
@Path() paymentId: string,
@Body() body: { amount?: number; date?: Date; paymentStatus?: PaymentStatus },