feat: shared between company

src/controllers/04-product-controller.ts

@@ -41,6 +41,7 @@ function globalAllow(user: RequestWithUser["user"]) {
   return allowList.some((v) => user.roles?.includes(v));
 }
 
+const permissionCondShared = createPermCondition((_) => true);
 const permissionCond = createPermCondition(globalAllow);
 const permissionCheck = createPermCheck(globalAllow);
 
@@ -100,9 +101,21 @@ export class ProductController extends Controller {
     return await prisma.product.count({
       where: {
         productGroupId,
-        productGroup: isSystem(req.user)
+        OR: isSystem(req.user)
           ? undefined
-          : { registeredBranch: { OR: permissionCond(req.user) } },
+          : [
+              {
+                productGroup: {
+                  registeredBranch: { OR: permissionCond(req.user) },
+                },
+              },
+              {
+                shared: true,
+                productGroup: {
+                  registeredBranch: { OR: permissionCondShared(req.user) },
+                },
+              },
+            ],
       },
     });
   }
@@ -122,9 +135,21 @@ export class ProductController extends Controller {
       AND: {
         ...filterStatus(status),
         productGroupId,
-        productGroup: isSystem(req.user)
+        OR: isSystem(req.user)
           ? undefined
-          : { registeredBranch: { OR: permissionCond(req.user) } },
+          : [
+              {
+                productGroup: {
+                  registeredBranch: { OR: permissionCond(req.user) },
+                },
+              },
+              {
+                shared: true,
+                productGroup: {
+                  registeredBranch: { OR: permissionCondShared(req.user) },
+                },
+              },
+            ],
       },
     } satisfies Prisma.ProductWhereInput;
 

src/controllers/04-product-group-controller.ts

@@ -226,6 +226,17 @@ export class ProductGroup extends Controller {
       );
     }
 
+    let companyBefore = (record.registeredBranch.headOffice || record.registeredBranch).code;
+    let companyAfter = branch ? (branch.headOffice || branch).code : false;
+
+    if (companyBefore && companyAfter && companyBefore !== companyAfter) {
+      throw new HttpError(
+        HttpStatus.BAD_REQUEST,
+        "Cannot move between different headoffice",
+        "crossCompanyNotPermit",
+      );
+    }
+
     const result = await prisma.productGroup.update({
       include: {
         createdBy: true,

src/controllers/04-service-controller.ts

@@ -42,6 +42,7 @@ function globalAllow(user: RequestWithUser["user"]) {
   return allowList.some((v) => user.roles?.includes(v));
 }
 
+const permissionCondShared = createPermCondition((_) => true);
 const permissionCond = createPermCondition(globalAllow);
 const permissionCheck = createPermCheck(globalAllow);
 
@@ -89,13 +90,21 @@ export class ServiceController extends Controller {
     return await prisma.service.count({
       where: {
         productGroupId,
-        productGroup: isSystem(req.user)
+        OR: isSystem(req.user)
           ? undefined
-          : {
+          : [
-              registeredBranch: {
+              {
-                OR: permissionCond(req.user),
+                productGroup: {
+                  registeredBranch: { OR: permissionCond(req.user) },
+                },
               },
-            },
+              {
+                shared: true,
+                productGroup: {
+                  registeredBranch: { OR: permissionCondShared(req.user) },
+                },
+              },
+            ],
       },
     });
   }
@@ -116,13 +125,21 @@ export class ServiceController extends Controller {
       AND: {
         ...filterStatus(status),
         productGroupId,
-        productGroup: isSystem(req.user)
+        OR: isSystem(req.user)
           ? undefined
-          : {
+          : [
-              registeredBranch: {
+              {
-                OR: permissionCond(req.user),
+                productGroup: {
+                  registeredBranch: { OR: permissionCond(req.user) },
+                },
               },
-            },
+              {
+                shared: true,
+                productGroup: {
+                  registeredBranch: { OR: permissionCondShared(req.user) },
+                },
+              },
+            ],
       },
     } satisfies Prisma.ServiceWhereInput;