check workflow

.github/workflows/release_Retirement.yaml

@@ -15,7 +15,7 @@ env:
     DEPLOY_PORT: 10102
     # COMPOSE_PATH: /home/frappet/docker/bma-ehr
     COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-retirement
-    TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0
+    TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
 
 jobs:
     # act workflow_dispatch -W .github/workflows/release_retirement.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@@ -69,21 +69,21 @@ jobs:
                       docker compose pull
                       docker compose up -d
                       echo "${{ steps.gen_ver.outputs.image_ver }}"> success
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: success()
+              if: success()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Success✅✅✅
+                      -Success✅✅✅
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: failure()
+              if: failure()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Failure❌❌❌
+                      -Failure❌❌❌
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}

.github/workflows/release_command.yaml

@@ -15,7 +15,7 @@ env:
     DEPLOY_PORT: 10102
     # COMPOSE_PATH: /home/frappet/docker/bma-ehr
     COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-command
-    TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0
+    TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
 
 jobs:
     # act workflow_dispatch -W .github/workflows/release_command.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@@ -69,21 +69,21 @@ jobs:
                       docker compose pull
                       docker compose up -d
                       echo "${{ steps.gen_ver.outputs.image_ver }}"> success
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: success()
+              if: success()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Success✅✅✅
+                      -Success✅✅✅
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: failure()
+              if: failure()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Failure❌❌❌
+                      -Failure❌❌❌
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}

.github/workflows/release_discipline.yaml

@@ -15,7 +15,7 @@ env:
     DEPLOY_PORT: 10102
     # COMPOSE_PATH: /home/frappet/docker/bma-ehr
     COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-discipline
-    TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0
+    TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
 
 jobs:
     # act workflow_dispatch -W .github/workflows/release_discipline.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@@ -69,21 +69,21 @@ jobs:
                       docker compose pull
                       docker compose up -d
                       echo "${{ steps.gen_ver.outputs.image_ver }}"> success
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: success()
+              if: success()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Success✅✅✅
+                      -Success✅✅✅
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: failure()
+              if: failure()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Failure❌❌❌
+                      -Failure❌❌❌
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}

.github/workflows/release_leave.yaml

@@ -12,7 +12,7 @@ env:
   DEPLOY_PORT: 10102
   # COMPOSE_PATH: /home/frappet/docker/bma-ehr
   COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-leave
-  TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0
+  TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
 
 jobs:
   # act workflow_dispatch -W .github/workflows/release_leave.yaml --input IMAGE_VER=leave-1.0.0 -s DOCKER_USER=sorawit -s DOCKER_PASS=P@ssword -s SSH_PASSWORD=P@ssw0rd
@@ -70,21 +70,21 @@ jobs:
             docker compose pull
             docker compose up -d
             echo "${{ steps.gen_ver.outputs.image_ver }}"> success
-      # - uses: snow-actions/line-notify@v1.1.0
+      - uses: snow-actions/line-notify@v1.1.0
-      #   if: success()
+        if: success()
-      #   with:
+        with:
-      #     access_token: ${{ secrets.TOKEN_LINE }}
+          access_token: ${{ secrets.TOKEN_LINE }}
-      #     message: |
+          message: |
-      #       -Success✅✅✅
+            -Success✅✅✅
-      #       Image: ${{env.IMAGE_NAME}}
+            Image: ${{env.IMAGE_NAME}}
-      #       Version: ${{ steps.gen_ver.outputs.IMAGE_VER }}
+            Version: ${{ steps.gen_ver.outputs.IMAGE_VER }}
-      #       By: ${{secrets.DOCKER_USER}}
+            By: ${{secrets.DOCKER_USER}}
-      # - uses: snow-actions/line-notify@v1.1.0
+      - uses: snow-actions/line-notify@v1.1.0
-      #   if: failure()
+        if: failure()
-      #   with:
+        with:
-      #     access_token: ${{ secrets.TOKEN_LINE }}
+          access_token: ${{ secrets.TOKEN_LINE }}
-      #     message: |
+          message: |
-      #       -Failure❌❌❌
+            -Failure❌❌❌
-      #       Image: ${{env.IMAGE_NAME}}
+            Image: ${{env.IMAGE_NAME}}
-      #       Version: ${{ steps.gen_ver.outputs.IMAGE_VER }}
+            Version: ${{ steps.gen_ver.outputs.IMAGE_VER }}
-      #       By: ${{secrets.DOCKER_USER}}
+            By: ${{secrets.DOCKER_USER}}

.github/workflows/release_placement.yaml

@@ -15,7 +15,7 @@ env:
     DEPLOY_PORT: 10102
     # COMPOSE_PATH: /home/frappet/docker/bma-ehr
     COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-placement
-    TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0
+    TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
 
 jobs:
     # act workflow_dispatch -W .github/workflows/release_placement.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@@ -69,21 +69,21 @@ jobs:
                       docker compose pull
                       docker compose up -d
                       echo "${{ steps.gen_ver.outputs.image_ver }}"> success
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: success()
+              if: success()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Success✅✅✅
+                      -Success✅✅✅
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: failure()
+              if: failure()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Failure❌❌❌
+                      -Failure❌❌❌
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}

.github/workflows/release_report.yaml

@@ -15,7 +15,7 @@ env:
     DEPLOY_PORT: 10102
     # COMPOSE_PATH: /home/frappet/docker/bma-ehr
     COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-report-v2
-    TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0
+    TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
 
 jobs:
     # act workflow_dispatch -W .github/workflows/release_report.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@@ -69,21 +69,21 @@ jobs:
                       docker compose pull
                       docker compose up -d
                       echo "${{ steps.gen_ver.outputs.image_ver }}"> success
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: success()
+              if: success()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Success✅✅✅
+                      -Success✅✅✅
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}
-            # - uses: snow-actions/line-notify@v1.1.0
+            - uses: snow-actions/line-notify@v1.1.0
-            #   if: failure()
+              if: failure()
-            #   with:
+              with:
-            #       access_token: ${{ env.TOKEN_LINE }}
+                  access_token: ${{ env.TOKEN_LINE }}
-            #       message: |
+                  message: |
-            #           -Failure❌❌❌
+                      -Failure❌❌❌
-            #           Image: ${{env.IMAGE_NAME}}
+                      Image: ${{env.IMAGE_NAME}}
-            #           Version: ${{ github.event.inputs.IMAGE_VER }}
+                      Version: ${{ github.event.inputs.IMAGE_VER }}
-            #           By: ${{secrets.DOCKER_USER}}
+                      By: ${{secrets.DOCKER_USER}}

BMA.EHR.Application/Repositories/PermissionRepository.cs

@@ -9,6 +9,7 @@ using Newtonsoft.Json;
 using System.Net.Http.Headers;
 using Microsoft.Extensions.Configuration;
 using System.Security.Claims;
+using System.Net.Http.Json;
 
 namespace BMA.EHR.Application.Repositories
 {
@@ -70,6 +71,39 @@ namespace BMA.EHR.Application.Repositories
             }
         }
 
+        public async Task<dynamic> GetPermissionAPIWorkflowAsync(string refId, string sysName)
+        {
+            try
+            {
+                var apiPath = $"{_configuration["API"]}/org/workflow/keycloak/isofficer";
+
+                using (var client = new HttpClient())
+                {
+                    var res = await client.PostAsJsonAsync(apiPath, new
+                    {
+                        data = new
+                        {
+                            refId = refId,
+                            sysName = sysName,
+                        },
+                    });
+                    var result = await res.Content.ReadAsStringAsync();
+                    if (res.IsSuccessStatusCode)
+                    {
+                        return true;
+                    }
+                    else
+                    {
+                        return false;
+                    }
+                }
+            }
+            catch
+            {
+                throw;
+            }
+        }
+
         #endregion
     }
 }

BMA.EHR.Discipline.Service/Controllers/DisciplineComplaintController.cs

@@ -509,6 +509,9 @@ namespace BMA.EHR.DisciplineComplaint.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("reject/{id:guid}")]
         public async Task<ActionResult<ResponseObject>> RejectDisciplineComplaint(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_COMPLAIN");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -516,6 +519,7 @@ namespace BMA.EHR.DisciplineComplaint.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.DisciplineComplaints
                         .Where(x => x.Id == id)
                         .FirstOrDefaultAsync();
@@ -666,6 +670,9 @@ namespace BMA.EHR.DisciplineComplaint.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("resume/{id:guid}")]
         public async Task<ActionResult<ResponseObject>> ResumeDisciplineComplaint(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_COMPLAIN");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -673,6 +680,7 @@ namespace BMA.EHR.DisciplineComplaint.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.DisciplineComplaints
                         .Where(x => x.Id == id)
                         .FirstOrDefaultAsync();

BMA.EHR.Discipline.Service/Controllers/DisciplineComplaint_AppealController.cs

@@ -228,6 +228,9 @@ namespace BMA.EHR.DisciplineComplaint_Appeal.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("admin/{id:guid}")]
         public async Task<ActionResult<ResponseObject>> GetByDisciplineByAdmin(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_APPEAL");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_APPEAL");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -235,6 +238,7 @@ namespace BMA.EHR.DisciplineComplaint_Appeal.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var _data = await _context.DisciplineComplaint_Appeals
                             .Include(x => x.DisciplineComplaint_Appeal_Docs)
                             .Include(x => x.DisciplineComplaint_Appeal_Historys)

BMA.EHR.Discipline.Service/Controllers/DisciplineComplaint_ChannelController.cs

@@ -121,6 +121,9 @@ namespace BMA.EHR.DisciplineComplaint_Channel.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:guid}")]
         public async Task<ActionResult<ResponseObject>> GetByDiscipline(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_COMPLAIN");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -128,6 +131,7 @@ namespace BMA.EHR.DisciplineComplaint_Channel.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.DisciplineComplaint_Channels
                             .Select(x => new
                             {

BMA.EHR.Discipline.Service/Controllers/DisciplineDirectorController.cs

@@ -125,6 +125,9 @@ namespace BMA.EHR.DisciplineDirector.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:guid}")]
         public async Task<ActionResult<ResponseObject>> GetByDiscipline(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INFO");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INFO");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -132,6 +135,7 @@ namespace BMA.EHR.DisciplineDirector.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.DisciplineDirectors
                             .Select(x => new
                             {

BMA.EHR.Discipline.Service/Controllers/DisciplineDisciplinaryController.cs

@@ -805,6 +805,9 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("reject/{id:guid}")]
         public async Task<ActionResult<ResponseObject>> RejectDisciplineDisciplinary(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INTERROGATE");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -812,6 +815,7 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.DisciplineDisciplinarys
                         .Where(x => x.Id == id)
                         .FirstOrDefaultAsync();
@@ -837,6 +841,9 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("approve/{id:guid}")]
         public async Task<ActionResult<ResponseObject>> ApproveDisciplineDisciplinary(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INTERROGATE");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -844,6 +851,7 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.DisciplineDisciplinarys
                         .Where(x => x.Id == id)
                         .FirstOrDefaultAsync();
@@ -867,6 +875,9 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("resume/{id:guid}")]
         public async Task<ActionResult<ResponseObject>> ResumeDisciplineDisciplinary(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INTERROGATE");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -874,6 +885,7 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.DisciplineDisciplinarys
                         .Where(x => x.Id == id)
                         .FirstOrDefaultAsync();

BMA.EHR.Discipline.Service/Controllers/DisciplineInvestigateController.cs

@@ -573,6 +573,9 @@ namespace BMA.EHR.DisciplineInvestigate.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("reject/{id:guid}")]
         public async Task<ActionResult<ResponseObject>> RejectDisciplineInvestigate(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INVESTIGATE");
+            if (getWorkflow == false)
             {
             var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INVESTIGATE");
             var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -580,6 +583,7 @@ namespace BMA.EHR.DisciplineInvestigate.Service.Controllers
             {
                 return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
             }
+            }
             var data = await _context.DisciplineInvestigates
                         .Where(x => x.Id == id)
                         .FirstOrDefaultAsync();
@@ -792,6 +796,9 @@ namespace BMA.EHR.DisciplineInvestigate.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("resume/{id:guid}")]
         public async Task<ActionResult<ResponseObject>> ResumeDisciplineInvestigate(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INVESTIGATE");
+            if (getWorkflow == false)
             {
             var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INVESTIGATE");
             var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -799,6 +806,7 @@ namespace BMA.EHR.DisciplineInvestigate.Service.Controllers
             {
                 return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
             }
+            }
             var data = await _context.DisciplineInvestigates
                         .Where(x => x.Id == id)
                         .FirstOrDefaultAsync();

BMA.EHR.Discipline.Service/Controllers/DisciplineResultController.cs

@@ -129,6 +129,9 @@ namespace BMA.EHR.DisciplineResult.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:guid}")]
         public async Task<ActionResult<ResponseObject>> GetByDisciplineResult(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_RESULT");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_RESULT");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -136,6 +139,7 @@ namespace BMA.EHR.DisciplineResult.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var _data = await _context.DisciplineDisciplinarys
                             .Select(x => new
                             {

BMA.EHR.Discipline.Service/Controllers/DisciplineSuspendController.cs

@@ -140,6 +140,9 @@ namespace BMA.EHR.DisciplineSuspend.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:guid}")]
         public async Task<ActionResult<ResponseObject>> GetByDisciplineSuspend(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_SUSPENDED");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_SUSPENDED");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -147,6 +150,7 @@ namespace BMA.EHR.DisciplineSuspend.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var _data = await _context.DisciplineReport_Profiles
                             .Select(x => new
                             {

BMA.EHR.Insignia/Controllers/InsigniaManageController.cs

@@ -443,6 +443,9 @@ namespace BMA.EHR.Insignia.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("org/dashboard/{insigniaManageId:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetListDashboardOrganization(Guid insigniaManageId)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(insigniaManageId.ToString(), "SYS_INSIGNIA_ALLOCATE");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_ALLOCATE");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -450,6 +453,7 @@ namespace BMA.EHR.Insignia.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var insigniaManage = await _context.InsigniaManages.AsQueryable()
                         .Include(x => x.InsigniaManageOrganiations)
                         .Select(p => new

BMA.EHR.Insignia/Controllers/InsigniaPeriodController.cs

@@ -144,6 +144,9 @@ namespace BMA.EHR.Insignia.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetById(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_INSIGNIA_ROUND");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_ROUND");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -151,6 +154,7 @@ namespace BMA.EHR.Insignia.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.InsigniaPeriods.AsQueryable()
                         .Where(x => x.Id == id)
                         .Select(p => new

BMA.EHR.Insignia/Controllers/InsigniaRequestController.cs

@@ -961,6 +961,9 @@ namespace BMA.EHR.Insignia.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("dashboard/{insigniaPeriodId:length(36)}")]
         public async Task<ActionResult<ResponseObject>> DashboardInsigniaPeriod(Guid insigniaPeriodId)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(insigniaPeriodId.ToString(), "SYS_INSIGNIA_MANAGE");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_MANAGE");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -968,6 +971,7 @@ namespace BMA.EHR.Insignia.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var insigniaPeriod = await _context.InsigniaPeriods.FirstOrDefaultAsync(x => x.Id == insigniaPeriodId);
             if (insigniaPeriod == null)
                 return Error(GlobalMessages.InsigniaRequestNotFound);

BMA.EHR.Leave/Controllers/LeaveController.cs

@@ -1089,6 +1089,9 @@ namespace BMA.EHR.Leave.Service.Controllers
         [ProducesResponseType(StatusCodes.Status401Unauthorized)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         public async Task<ActionResult<ResponseObject>> GetTimeRecordAsync([Required] Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_CHECKIN");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_CHECKIN");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -1096,6 +1099,7 @@ namespace BMA.EHR.Leave.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
 
             var imgUrl = $"{_configuration["MinIO:Endpoint"]}{_configuration["MinIO:BucketName"]}";
 
@@ -1475,6 +1479,9 @@ namespace BMA.EHR.Leave.Service.Controllers
         [ProducesResponseType(StatusCodes.Status401Unauthorized)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         public async Task<ActionResult<ResponseObject>> GetChangeRoundHistoryByProfileIdAsync(Guid id, int page = 1, int pageSize = 10, string keyword = "")
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_WORK_ROUND_EDIT");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_WORK_ROUND_EDIT");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -1482,6 +1489,7 @@ namespace BMA.EHR.Leave.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _userDutyTimeRepository.GetListByProfileIdAsync(id);
 
             var resultSet = new List<ChangeRoundHistoryDto>();
@@ -1835,6 +1843,9 @@ namespace BMA.EHR.Leave.Service.Controllers
         [ProducesResponseType(StatusCodes.Status401Unauthorized)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         public async Task<ActionResult<ResponseObject>> GetLogRecordAsync([Required] Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_CHECKIN");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_CHECKIN");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -1842,6 +1853,7 @@ namespace BMA.EHR.Leave.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
 
             var imgUrl = $"{_configuration["MinIO:Endpoint"]}{_configuration["MinIO:BucketName"]}";
 
@@ -2060,6 +2072,9 @@ namespace BMA.EHR.Leave.Service.Controllers
         [ProducesResponseType(StatusCodes.Status401Unauthorized)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         public async Task<ActionResult<ResponseObject>> GetCalendarByProfileAsync(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_WORK_ROUND_EDIT");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_WORK_ROUND_EDIT");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -2067,6 +2082,7 @@ namespace BMA.EHR.Leave.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _userCalendarRepository.GetExist(id);
             if (data == null)
                 return Success(new { Work = "NORMAL" });

BMA.EHR.Leave/Controllers/LeaveRequestController.cs

@@ -1462,7 +1462,7 @@ namespace BMA.EHR.Leave.Service.Controllers
                 var _res = await client.PostAsJsonAsync(apiUrlOrg, new
                 {
                     refId = id,
-                    sysName = "LEAVE_LIST",
+                    sysName = "SYS_LEAVE_LIST",
                     posLevelName = profile.PosLevel?.PosLevelName ?? "",
                     posTypeName = profile.PosType?.PosTypeName ?? "",
                 });
@@ -1511,6 +1511,9 @@ namespace BMA.EHR.Leave.Service.Controllers
         [ProducesResponseType(StatusCodes.Status401Unauthorized)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         public async Task<ActionResult<ResponseObject>> GetLeaveRequestForAdminByIdAsync(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_LEAVE_LIST");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_LEAVE_LIST");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -1518,6 +1521,7 @@ namespace BMA.EHR.Leave.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
 
             var userId = UserId == null ? Guid.Empty : Guid.Parse(UserId);
 

BMA.EHR.Placement.Service/Controllers/PlacementAppointmentController.cs

@@ -204,6 +204,9 @@ namespace BMA.EHR.Placement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_PROMOTION_OFFICER");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PROMOTION_OFFICER");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -211,6 +214,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.PlacementAppointments.AsQueryable()
                         .Where(x => x.type == "OFFICER")
                         .Where(x => x.Id == id)

BMA.EHR.Placement.Service/Controllers/PlacementAppointmentEmployeeController.cs

@@ -200,6 +200,9 @@ namespace BMA.EHR.Placement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_PROMOTION_EMP");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PROMOTION_EMP");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -207,6 +210,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.PlacementAppointments.AsQueryable()
                         .Where(x => x.type == "EMPLOYEE")
                         .Where(x => x.Id == id)

BMA.EHR.Placement.Service/Controllers/PlacementController.cs

@@ -132,6 +132,9 @@ namespace BMA.EHR.Placement.Service.Controllers
 
         [HttpGet("pass/{examId:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetExamByPlacement(Guid examId)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(examId.ToString(), "SYS_PLACEMENT_PASS");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -139,6 +142,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             if (PlacementAdmin == true)
             {
                 var data = await _context.PlacementProfiles.Where(x => x.Placement.Id == examId).Select(x => new
@@ -782,6 +786,9 @@ namespace BMA.EHR.Placement.Service.Controllers
 
         [HttpGet("pass/deferment/{personalId:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetPersonDeferment(Guid personalId)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(personalId.ToString(), "SYS_PLACEMENT_PASS");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -789,6 +796,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var person = await _context.PlacementProfiles.Include(x => x.ReliefDoc).FirstOrDefaultAsync(x => x.Id == personalId);
             if (person == null)
                 return Error(GlobalMessages.DataNotFound, 404);
@@ -803,6 +811,9 @@ namespace BMA.EHR.Placement.Service.Controllers
 
         [HttpGet("pass/disclaim/{personalId:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetPersonDisclaim(Guid personalId)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(personalId.ToString(), "SYS_PLACEMENT_PASS");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -810,6 +821,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var person = await _context.PlacementProfiles.FindAsync(personalId);
             if (person == null)
                 return Error(GlobalMessages.DataNotFound, 404);

BMA.EHR.Placement.Service/Controllers/PlacementOfficerController.cs

@@ -309,6 +309,9 @@ namespace BMA.EHR.Placement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_TEMPDUTY");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TEMPDUTY");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -316,6 +319,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.PlacementOfficers.AsQueryable()
                         .Where(x => x.Id == id)
                         .Select(p => new

BMA.EHR.Placement.Service/Controllers/PlacementReceiveController.cs

@@ -216,6 +216,9 @@ namespace BMA.EHR.Placement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_TRANSFER_RECEIVE");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_RECEIVE");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -223,6 +226,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.PlacementReceives.AsQueryable()
                         .Where(x => x.Id == id)
                         .Select(p => new

BMA.EHR.Placement.Service/Controllers/PlacementRepatriationController.cs

@@ -188,6 +188,9 @@ namespace BMA.EHR.Placement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_TEMPDUTY2");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TEMPDUTY2");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -195,6 +198,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.PlacementRepatriations.AsQueryable()
                         .Where(x => x.Id == id)
                         .Select(p => new

BMA.EHR.Placement.Service/Controllers/PlacementTransferController.cs

@@ -382,6 +382,9 @@ namespace BMA.EHR.Placement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_TRANSFER_REQ");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_REQ");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -389,6 +392,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.PlacementTransfers.AsQueryable()
                         .Where(x => x.Id == id)
                         .Select(p => new
@@ -601,7 +605,7 @@ namespace BMA.EHR.Placement.Service.Controllers
                 var _res = await client.PostAsJsonAsync(apiUrlOrg, new
                 {
                     refId = placementTransfer.Id,
-                    sysName = "PLACEMENT_TRANSFER",
+                    sysName = "SYS_TRANSFER_REQ",
                     posLevelName = placementTransfer.posLevelNameOld,
                     posTypeName = placementTransfer.posTypeNameOld,
                 });

BMA.EHR.Report.Service/Controllers/InsigniaReportController.cs

@@ -387,6 +387,9 @@ namespace BMA.EHR.Report.Service.Controllers
         public async Task<ActionResult<ResponseObject>> GetInsignia43ConvertReportAsync(Guid id, string exportType = "pdf")
         {
             try
+            {
+                var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_INSIGNIA_REPORT");
+                if (getWorkflow == false)
                 {
                     var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT");
                     var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -394,6 +397,7 @@ namespace BMA.EHR.Report.Service.Controllers
                     {
                         return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                     }
+                }
                 var mimeType = "";
                 switch (exportType.Trim().ToLower())
                 {
@@ -429,6 +433,9 @@ namespace BMA.EHR.Report.Service.Controllers
         public async Task<ActionResult<ResponseObject>> GetInsignia44ConvertReportAsync(Guid id, string exportType = "pdf")
         {
             try
+            {
+                var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_INSIGNIA_REPORT");
+                if (getWorkflow == false)
                 {
                     var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT");
                     var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -436,6 +443,7 @@ namespace BMA.EHR.Report.Service.Controllers
                     {
                         return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                     }
+                }
                 var data = await _repository.GetSummaryCoinReport(id);
                 var SummaryTotal = await _repository.GetSummaryTotalCoinReport(id);
                 var YearInsignalPeriod = await _repository.GetYearInsigniaPeriod(id);
@@ -507,6 +515,9 @@ namespace BMA.EHR.Report.Service.Controllers
         public async Task<ActionResult<ResponseObject>> GetInsignia45ConvertReportAsync(Guid id, string exportType = "pdf")
         {
             try
+            {
+                var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_INSIGNIA_REPORT");
+                if (getWorkflow == false)
                 {
                     var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT");
                     var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -514,6 +525,7 @@ namespace BMA.EHR.Report.Service.Controllers
                     {
                         return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                     }
+                }
 
                 //Guid ids = Guid.Parse(id);  
                 var data = await _repository.GetCoinReport(id);

BMA.EHR.Retirement.Service/Controllers/RetirementController.cs

@@ -747,6 +747,9 @@ namespace BMA.EHR.Retirement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{retireId:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetProfileRetirement(Guid retireId)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(retireId.ToString(), "SYS_RETIREMENT");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_RETIREMENT");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -754,6 +757,7 @@ namespace BMA.EHR.Retirement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var retire = await _context.RetirementPeriods
                                 .Include(x => x.RetirementProfiles)
                                 .Include(x => x.Document)

BMA.EHR.Retirement.Service/Controllers/RetirementDeceasedController.cs

@@ -519,6 +519,9 @@ namespace BMA.EHR.Retirement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("detail/{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetail(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_PASSAWAY");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PASSAWAY");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -526,6 +529,7 @@ namespace BMA.EHR.Retirement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.RetirementDeceasedNotis.AsQueryable()
                         .Where(x => x.RetirementDeceased.Id == id)
                         .Select(p => new

BMA.EHR.Retirement.Service/Controllers/RetirementOtherController.cs

@@ -184,6 +184,9 @@ namespace BMA.EHR.Retirement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_PLACEMENT_OTHER");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_OTHER");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -191,6 +194,7 @@ namespace BMA.EHR.Retirement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.RetirementOthers.AsQueryable()
                         .Where(x => x.Id == id)
                         .Select(p => new

BMA.EHR.Retirement.Service/Controllers/RetirementOutController.cs

@@ -163,6 +163,9 @@ namespace BMA.EHR.Retirement.Service.Controllers
         /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
+        {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISMISS");
+            if (getWorkflow == false)
             {
                 var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISMISS");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@@ -170,6 +173,7 @@ namespace BMA.EHR.Retirement.Service.Controllers
                 {
                     return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
                 }
+            }
             var data = await _context.RetirementOuts.AsQueryable()
                         .Where(x => x.Id == id)
                         .Select(p => new

BMA.EHR.Retirement.Service/Controllers/RetirementResignController.cs

@@ -220,6 +220,16 @@ namespace BMA.EHR.Retirement.Service.Controllers
         [HttpGet("{id:length(36)}")]
         public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
         {
+            var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_RESIGN");
+            if (getWorkflow == false)
+            {
+                var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_RESIGN");
+                var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
+                if (jsonData["status"]?.ToString() != "200")
+                {
+                    return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
+                }
+            }
             var data = await _context.RetirementResigns.AsQueryable()
                         .Where(x => x.Id == id)
                         .Select(p => new
@@ -516,7 +526,7 @@ namespace BMA.EHR.Retirement.Service.Controllers
                 var _res = await client.PostAsJsonAsync($"{_configuration["API"]}/org/workflow/add-workflow", new
                 {
                     refId = retirementResign.Id,
-                    sysName = "RETIREMENT_RESIFNATION",
+                    sysName = "SYS_RESIGN",
                     posLevelName = retirementResign.PositionLevelOld,
                     posTypeName = retirementResign.PositionTypeOld,
                 });