From 4a195494d62230fd73d38844f53c5a6073dd0ad6 Mon Sep 17 00:00:00 2001
From: puriphatt <puriphat@frappet.com>
Date: Wed, 9 Jul 2025 10:13:56 +0700
Subject: [PATCH] feat: add create permission handling in TreeComponent and
 MainPage

---
 src/components/TreeComponent.vue            |  3 +-
 src/pages/01_branch-management/MainPage.vue | 39 ++++++++++++---------
 src/stores/utils/index.ts                   |  3 +-
 3 files changed, 26 insertions(+), 19 deletions(-)

diff --git a/src/components/TreeComponent.vue b/src/components/TreeComponent.vue
index 68ce72a4..6abff3d4 100644
--- a/src/components/TreeComponent.vue
+++ b/src/components/TreeComponent.vue
@@ -16,6 +16,7 @@ withDefaults(
     labelKey?: string;
     childrenKey: string;
     action?: boolean;
+    hideCreate?: boolean;
   }>(),
   {
     color: 'transparent',
@@ -119,7 +120,7 @@ defineEmits<{
             />
 
             <q-btn
-              v-if="node.isHeadOffice && typeTree === 'branch'"
+              v-if="node.isHeadOffice && typeTree === 'branch' && !hideCreate"
               :id="`create-sub-branch-btn-${node.name}`"
               @click.stop="$emit('create', node)"
               icon="mdi-file-plus-outline"
diff --git a/src/pages/01_branch-management/MainPage.vue b/src/pages/01_branch-management/MainPage.vue
index e056b6d4..a31939e1 100644
--- a/src/pages/01_branch-management/MainPage.vue
+++ b/src/pages/01_branch-management/MainPage.vue
@@ -1074,6 +1074,7 @@ watch(currentHq, () => {
                 <div class="col full-width scroll">
                   <div class="q-pa-md">
                     <TreeComponent
+                      :hide-create="!canAccess('branch', 'create')"
                       v-model:nodes="treeData"
                       v-model:expanded-tree="expandedTree"
                       node-key="id"
@@ -1562,17 +1563,17 @@ watch(currentHq, () => {
                         <q-td>
                           <KebabAction
                             v-if="
-                              isRoleInclude([
-                                'system',
-                                'head_of_admin',
-                                'admin',
-                                'executive',
-                                'accountant',
-                              ]) ||
-                              (canAccess('branch') && currentHq.id)
+                              !currentHq.id
+                                ? canAccess('branch', 'create')
+                                : true
                             "
                             :status="props.row.status"
                             :idName="props.row.name"
+                            :hide-delete="
+                              !currentHq.id
+                                ? !isRoleInclude(['system'])
+                                : !canAccess('branch', 'create')
+                            "
                             @view="
                               if (props.row.isHeadOffice) {
                                 triggerEdit(
@@ -1713,17 +1714,17 @@ watch(currentHq, () => {
                           <template v-slot:action>
                             <KebabAction
                               v-if="
-                                isRoleInclude([
-                                  'system',
-                                  'head_of_admin',
-                                  'admin',
-                                  'executive',
-                                  'accountant',
-                                ]) ||
-                                (canAccess('branch') && currentHq.id)
+                                !currentHq.id
+                                  ? canAccess('branch', 'create')
+                                  : true
                               "
                               :status="props.row.status"
                               :idName="props.row.name"
+                              :hide-delete="
+                                !currentHq.id
+                                  ? !isRoleInclude(['system'])
+                                  : !canAccess('branch', 'create')
+                              "
                               @view="
                                 if (props.row.isHeadOffice) {
                                   triggerEdit(
@@ -2272,7 +2273,11 @@ watch(currentHq, () => {
                 type="button"
               />
               <DeleteButton
-                v-if="formType !== 'edit'"
+                v-if="
+                  formType !== 'edit' && formTypeBranch === 'headOffice'
+                    ? isRoleInclude(['system'])
+                    : canAccess('branch', 'create')
+                "
                 id="btn-info-basic-delete"
                 icon-only
                 @click="triggerDelete(currentEdit.id)"
diff --git a/src/stores/utils/index.ts b/src/stores/utils/index.ts
index 8214bb27..fbd7fa1f 100644
--- a/src/stores/utils/index.ts
+++ b/src/stores/utils/index.ts
@@ -251,6 +251,7 @@ const allRoles = [
 
 const permissions = {
   branch: {
+    create: allRoles.slice(0, 4),
     edit: allRoles.slice(0, 7),
     view: allRoles.slice(0, 7),
   },
@@ -303,7 +304,7 @@ const permissions = {
 
 export function canAccess(
   menu: keyof typeof permissions,
-  action: 'edit' | 'view' = 'view',
+  action: 'edit' | 'create' | 'view' = 'view',
 ): boolean {
   // uma_authorization = all roles
   const roles = getRole() ?? [];