task

2024-09-11 15:59:38 +07:00 · 2024-09-11 15:59:38 +07:00 · 0fd8e81d71
commit 0fd8e81d71
parent 172a917086
5 changed files with 32 additions and 2 deletions
--- a/BMA.EHR.Placement.Service/Controllers/PlacementTransferController.cs
+++ b/BMA.EHR.Placement.Service/Controllers/PlacementTransferController.cs
@ -618,6 +618,13 @@ namespace BMA.EHR.Placement.Service.Controllers
        [HttpGet("confirm/{id:length(36)}")]
        public async Task<ActionResult<ResponseObject>> AdminConfirm(Guid id)
        {
+            var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_TRANSFER_REQ");
+            var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
+            if (jsonData["status"]?.ToString() != "200")
+            {
+                return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
+            }
+
            var uppdated = await _context.PlacementTransfers
                            .FirstOrDefaultAsync(x => x.Id == id);
            if (uppdated == null)