From 676bd1d16dea402b8f3a66bf14d705fcc07a0e55 Mon Sep 17 00:00:00 2001
From: Methapon2001 <61303214+Methapon2001@users.noreply.github.com>
Date: Wed, 12 Mar 2025 17:58:36 +0700
Subject: [PATCH] fix: typo

---
 src/controllers/06-request-list-controller.ts | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/src/controllers/06-request-list-controller.ts b/src/controllers/06-request-list-controller.ts
index bfd9712..5857be2 100644
--- a/src/controllers/06-request-list-controller.ts
+++ b/src/controllers/06-request-list-controller.ts
@@ -269,7 +269,7 @@ export class RequestDataActionController extends Controller {
     return result[0];
   }
 
-  @Post("request-work/${requestWorkId}/reject-request-cancel")
+  @Post("request-work/{requestWorkId}/reject-request-cancel")
   @Security("keycloak")
   async rejectWorkRequestCancel(
     @Request() req: RequestWithUser,
@@ -303,7 +303,20 @@ export class RequestDataActionController extends Controller {
 
   @Post("cancel")
   @Security("keycloak")
-  async cancelRequestData(@Path() requestDataId: string) {
+  async cancelRequestData(@Request() req: RequestWithUser, @Path() requestDataId: string) {
+    const result = await prisma.requestData.findFirst({
+      where: {
+        id: requestDataId,
+        quotation: {
+          registeredBranch: {
+            OR: permissionCond(req.user),
+          },
+        },
+      },
+    });
+
+    if (!result) throw notFoundError("Request Data");
+
     await prisma.$transaction(async (tx) => {
       const workStepCondition = {
         requestWork: { requestDataId },