hrms-bangkok/hrms-api-backend
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages 7 Wiki Activity Actions

check workflow

Browse source
This commit is contained in:
kittapath 2024-10-22 08:20:33 +07:00
parent 835b0ce337
commit 4bec812d25
33 changed files with 455 additions and 267 deletions
Download patch file Download diff file Expand all files Collapse all files

38
.github/workflows/release_Retirement.yaml vendored
View file

@ -15,7 +15,7 @@ env:
DEPLOY_PORT: 10102 DEPLOY_PORT: 10102
# COMPOSE_PATH: /home/frappet/docker/bma-ehr # COMPOSE_PATH: /home/frappet/docker/bma-ehr
COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-retirement COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-retirement
TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0 TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
jobs: jobs:
# act workflow_dispatch -W .github/workflows/release_retirement.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357 # act workflow_dispatch -W .github/workflows/release_retirement.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@ -69,21 +69,21 @@ jobs:
docker compose pull docker compose pull
docker compose up -d docker compose up -d
echo "${{ steps.gen_ver.outputs.image_ver }}"> success echo "${{ steps.gen_ver.outputs.image_ver }}"> success
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: success() if: success()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Success✅✅✅ -Success✅✅✅
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: failure() if: failure()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Failure❌❌❌ -Failure❌❌❌
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}

38
.github/workflows/release_command.yaml vendored
View file

@ -15,7 +15,7 @@ env:
DEPLOY_PORT: 10102 DEPLOY_PORT: 10102
# COMPOSE_PATH: /home/frappet/docker/bma-ehr # COMPOSE_PATH: /home/frappet/docker/bma-ehr
COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-command COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-command
TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0 TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
jobs: jobs:
# act workflow_dispatch -W .github/workflows/release_command.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357 # act workflow_dispatch -W .github/workflows/release_command.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@ -69,21 +69,21 @@ jobs:
docker compose pull docker compose pull
docker compose up -d docker compose up -d
echo "${{ steps.gen_ver.outputs.image_ver }}"> success echo "${{ steps.gen_ver.outputs.image_ver }}"> success
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: success() if: success()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Success✅✅✅ -Success✅✅✅
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: failure() if: failure()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Failure❌❌❌ -Failure❌❌❌
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}

38
.github/workflows/release_discipline.yaml vendored
View file

@ -15,7 +15,7 @@ env:
DEPLOY_PORT: 10102 DEPLOY_PORT: 10102
# COMPOSE_PATH: /home/frappet/docker/bma-ehr # COMPOSE_PATH: /home/frappet/docker/bma-ehr
COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-discipline COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-discipline
TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0 TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
jobs: jobs:
# act workflow_dispatch -W .github/workflows/release_discipline.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357 # act workflow_dispatch -W .github/workflows/release_discipline.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@ -69,21 +69,21 @@ jobs:
docker compose pull docker compose pull
docker compose up -d docker compose up -d
echo "${{ steps.gen_ver.outputs.image_ver }}"> success echo "${{ steps.gen_ver.outputs.image_ver }}"> success
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: success() if: success()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Success✅✅✅ -Success✅✅✅
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: failure() if: failure()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Failure❌❌❌ -Failure❌❌❌
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}

38
.github/workflows/release_leave.yaml vendored
View file

@ -12,7 +12,7 @@ env:
DEPLOY_PORT: 10102 DEPLOY_PORT: 10102
# COMPOSE_PATH: /home/frappet/docker/bma-ehr # COMPOSE_PATH: /home/frappet/docker/bma-ehr
COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-leave COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-leave
TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0 TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
jobs: jobs:
# act workflow_dispatch -W .github/workflows/release_leave.yaml --input IMAGE_VER=leave-1.0.0 -s DOCKER_USER=sorawit -s DOCKER_PASS=P@ssword -s SSH_PASSWORD=P@ssw0rd # act workflow_dispatch -W .github/workflows/release_leave.yaml --input IMAGE_VER=leave-1.0.0 -s DOCKER_USER=sorawit -s DOCKER_PASS=P@ssword -s SSH_PASSWORD=P@ssw0rd
@ -70,21 +70,21 @@ jobs:
docker compose pull docker compose pull
docker compose up -d docker compose up -d
echo "${{ steps.gen_ver.outputs.image_ver }}"> success echo "${{ steps.gen_ver.outputs.image_ver }}"> success
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: success() if: success()
# with: with:
# access_token: ${{ secrets.TOKEN_LINE }} access_token: ${{ secrets.TOKEN_LINE }}
# message: | message: |
# -Success✅✅✅ -Success✅✅✅
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ steps.gen_ver.outputs.IMAGE_VER }} Version: ${{ steps.gen_ver.outputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: failure() if: failure()
# with: with:
# access_token: ${{ secrets.TOKEN_LINE }} access_token: ${{ secrets.TOKEN_LINE }}
# message: | message: |
# -Failure❌❌❌ -Failure❌❌❌
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ steps.gen_ver.outputs.IMAGE_VER }} Version: ${{ steps.gen_ver.outputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}

38
.github/workflows/release_placement.yaml vendored
View file

@ -15,7 +15,7 @@ env:
DEPLOY_PORT: 10102 DEPLOY_PORT: 10102
# COMPOSE_PATH: /home/frappet/docker/bma-ehr # COMPOSE_PATH: /home/frappet/docker/bma-ehr
COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-placement COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-placement
TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0 TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
jobs: jobs:
# act workflow_dispatch -W .github/workflows/release_placement.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357 # act workflow_dispatch -W .github/workflows/release_placement.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@ -69,21 +69,21 @@ jobs:
docker compose pull docker compose pull
docker compose up -d docker compose up -d
echo "${{ steps.gen_ver.outputs.image_ver }}"> success echo "${{ steps.gen_ver.outputs.image_ver }}"> success
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: success() if: success()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Success✅✅✅ -Success✅✅✅
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: failure() if: failure()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Failure❌❌❌ -Failure❌❌❌
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}

38
.github/workflows/release_report.yaml vendored
View file

@ -15,7 +15,7 @@ env:
DEPLOY_PORT: 10102 DEPLOY_PORT: 10102
# COMPOSE_PATH: /home/frappet/docker/bma-ehr # COMPOSE_PATH: /home/frappet/docker/bma-ehr
COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-report-v2 COMPOSE_PATH: /home/frappet/docker/bma/bma-ehr-report-v2
TOKEN_LINE: uxuK5hDzS2DsoC5piJBrWRLiz8GgY7iMZZldOWsDDF0 TOKEN_LINE: 2Y0kIem9pgiTcWpp4DSOZn4SHu4tpueWFLN22LsAsp0
jobs: jobs:
# act workflow_dispatch -W .github/workflows/release_report.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357 # act workflow_dispatch -W .github/workflows/release_report.yaml --input IMAGE_VER=latest -s DOCKER_USER=admin -s DOCKER_PASS=FPTadmin2357 -s SSH_PASSWORD=FPTadmin2357
@ -69,21 +69,21 @@ jobs:
docker compose pull docker compose pull
docker compose up -d docker compose up -d
echo "${{ steps.gen_ver.outputs.image_ver }}"> success echo "${{ steps.gen_ver.outputs.image_ver }}"> success
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: success() if: success()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Success✅✅✅ -Success✅✅✅
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}
# - uses: snow-actions/line-notify@v1.1.0 - uses: snow-actions/line-notify@v1.1.0
# if: failure() if: failure()
# with: with:
# access_token: ${{ env.TOKEN_LINE }} access_token: ${{ env.TOKEN_LINE }}
# message: | message: |
# -Failure❌❌❌ -Failure❌❌❌
# Image: ${{env.IMAGE_NAME}} Image: ${{env.IMAGE_NAME}}
# Version: ${{ github.event.inputs.IMAGE_VER }} Version: ${{ github.event.inputs.IMAGE_VER }}
# By: ${{secrets.DOCKER_USER}} By: ${{secrets.DOCKER_USER}}

34
BMA.EHR.Application/Repositories/PermissionRepository.cs
View file

@ -9,6 +9,7 @@ using Newtonsoft.Json;
using System.Net.Http.Headers; using System.Net.Http.Headers;
using Microsoft.Extensions.Configuration; using Microsoft.Extensions.Configuration;
using System.Security.Claims; using System.Security.Claims;
using System.Net.Http.Json;
namespace BMA.EHR.Application.Repositories namespace BMA.EHR.Application.Repositories
{ {
@ -70,6 +71,39 @@ namespace BMA.EHR.Application.Repositories
} }
} }
public async Task<dynamic> GetPermissionAPIWorkflowAsync(string refId, string sysName)
{
try
{
var apiPath = $"{_configuration["API"]}/org/workflow/keycloak/isofficer";
using (var client = new HttpClient())
{
var res = await client.PostAsJsonAsync(apiPath, new
{
data = new
{
refId = refId,
sysName = sysName,
},
});
var result = await res.Content.ReadAsStringAsync();
if (res.IsSuccessStatusCode)
{
return true;
}
else
{
return false;
}
}
}
catch
{
throw;
}
}
#endregion #endregion
} }
} }

36
BMA.EHR.Discipline.Service/Controllers/DisciplineComplaintController.cs
View file

@ -136,29 +136,29 @@ namespace BMA.EHR.DisciplineComplaint.Service.Controllers
/// <response code="401">ไม่ได้ Login เข้าระบบ</response> /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
/// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response> /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
[HttpGet("{page}/{id:guid}")] [HttpGet("{page}/{id:guid}")]
public async Task<ActionResult<ResponseObject>> GetByDisciplineComplaint(string page,Guid id) public async Task<ActionResult<ResponseObject>> GetByDisciplineComplaint(string page, Guid id)
{ {
page = page.Trim().ToUpper(); page = page.Trim().ToUpper();
string getPermission; string getPermission;
if (page == "MAIN") if (page == "MAIN")
{ {
getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN"); getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN");
} }
else if (page == "INVES") else if (page == "INVES")
{ {
getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INVESTIGATE"); getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INVESTIGATE");
} }
else if (page == "DISCIP") else if (page == "DISCIP")
{ {
getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE"); getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE");
} }
else if (page == "RESULT") else if (page == "RESULT")
{ {
getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_RESULT"); getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_RESULT");
} }
else else
{ {
getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN"); getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN");
} }
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
@ -510,11 +510,15 @@ namespace BMA.EHR.DisciplineComplaint.Service.Controllers
[HttpGet("reject/{id:guid}")] [HttpGet("reject/{id:guid}")]
public async Task<ActionResult<ResponseObject>> RejectDisciplineComplaint(Guid id) public async Task<ActionResult<ResponseObject>> RejectDisciplineComplaint(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_COMPLAIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.DisciplineComplaints var data = await _context.DisciplineComplaints
.Where(x => x.Id == id) .Where(x => x.Id == id)
@ -667,11 +671,15 @@ namespace BMA.EHR.DisciplineComplaint.Service.Controllers
[HttpGet("resume/{id:guid}")] [HttpGet("resume/{id:guid}")]
public async Task<ActionResult<ResponseObject>> ResumeDisciplineComplaint(Guid id) public async Task<ActionResult<ResponseObject>> ResumeDisciplineComplaint(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_COMPLAIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.DisciplineComplaints var data = await _context.DisciplineComplaints
.Where(x => x.Id == id) .Where(x => x.Id == id)

12
BMA.EHR.Discipline.Service/Controllers/DisciplineComplaint_AppealController.cs
View file

@ -229,11 +229,15 @@ namespace BMA.EHR.DisciplineComplaint_Appeal.Service.Controllers
[HttpGet("admin/{id:guid}")] [HttpGet("admin/{id:guid}")]
public async Task<ActionResult<ResponseObject>> GetByDisciplineByAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetByDisciplineByAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_APPEAL"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_APPEAL");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_APPEAL");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var _data = await _context.DisciplineComplaint_Appeals var _data = await _context.DisciplineComplaint_Appeals
.Include(x => x.DisciplineComplaint_Appeal_Docs) .Include(x => x.DisciplineComplaint_Appeal_Docs)

12
BMA.EHR.Discipline.Service/Controllers/DisciplineComplaint_ChannelController.cs
View file

@ -122,11 +122,15 @@ namespace BMA.EHR.DisciplineComplaint_Channel.Service.Controllers
[HttpGet("{id:guid}")] [HttpGet("{id:guid}")]
public async Task<ActionResult<ResponseObject>> GetByDiscipline(Guid id) public async Task<ActionResult<ResponseObject>> GetByDiscipline(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_COMPLAIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_COMPLAIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.DisciplineComplaint_Channels var data = await _context.DisciplineComplaint_Channels
.Select(x => new .Select(x => new

12
BMA.EHR.Discipline.Service/Controllers/DisciplineDirectorController.cs
View file

@ -126,11 +126,15 @@ namespace BMA.EHR.DisciplineDirector.Service.Controllers
[HttpGet("{id:guid}")] [HttpGet("{id:guid}")]
public async Task<ActionResult<ResponseObject>> GetByDiscipline(Guid id) public async Task<ActionResult<ResponseObject>> GetByDiscipline(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INFO"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INFO");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INFO");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.DisciplineDirectors var data = await _context.DisciplineDirectors
.Select(x => new .Select(x => new

38
BMA.EHR.Discipline.Service/Controllers/DisciplineDisciplinaryController.cs
View file

@ -409,7 +409,7 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
/// <response code="401">ไม่ได้ Login เข้าระบบ</response> /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
/// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response> /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
[HttpGet("{page}/{id:guid}")] [HttpGet("{page}/{id:guid}")]
public async Task<ActionResult<ResponseObject>> GetByDisciplineDisciplinary(string page,Guid id) public async Task<ActionResult<ResponseObject>> GetByDisciplineDisciplinary(string page, Guid id)
{ {
page = page.Trim().ToUpper(); page = page.Trim().ToUpper();
string getPermission; string getPermission;
@ -806,11 +806,15 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
[HttpGet("reject/{id:guid}")] [HttpGet("reject/{id:guid}")]
public async Task<ActionResult<ResponseObject>> RejectDisciplineDisciplinary(Guid id) public async Task<ActionResult<ResponseObject>> RejectDisciplineDisciplinary(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INTERROGATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.DisciplineDisciplinarys var data = await _context.DisciplineDisciplinarys
.Where(x => x.Id == id) .Where(x => x.Id == id)
@ -838,11 +842,15 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
[HttpGet("approve/{id:guid}")] [HttpGet("approve/{id:guid}")]
public async Task<ActionResult<ResponseObject>> ApproveDisciplineDisciplinary(Guid id) public async Task<ActionResult<ResponseObject>> ApproveDisciplineDisciplinary(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INTERROGATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.DisciplineDisciplinarys var data = await _context.DisciplineDisciplinarys
.Where(x => x.Id == id) .Where(x => x.Id == id)
@ -868,11 +876,15 @@ namespace BMA.EHR.DisciplineDisciplinary.Service.Controllers
[HttpGet("resume/{id:guid}")] [HttpGet("resume/{id:guid}")]
public async Task<ActionResult<ResponseObject>> ResumeDisciplineDisciplinary(Guid id) public async Task<ActionResult<ResponseObject>> ResumeDisciplineDisciplinary(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INTERROGATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INTERROGATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.DisciplineDisciplinarys var data = await _context.DisciplineDisciplinarys
.Where(x => x.Id == id) .Where(x => x.Id == id)

8
BMA.EHR.Discipline.Service/Controllers/DisciplineInvestigateController.cs
View file

@ -574,12 +574,16 @@ namespace BMA.EHR.DisciplineInvestigate.Service.Controllers
[HttpGet("reject/{id:guid}")] [HttpGet("reject/{id:guid}")]
public async Task<ActionResult<ResponseObject>> RejectDisciplineInvestigate(Guid id) public async Task<ActionResult<ResponseObject>> RejectDisciplineInvestigate(Guid id)
{ {
var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INVESTIGATE");
if (getWorkflow == false)
{
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INVESTIGATE"); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INVESTIGATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
}
var data = await _context.DisciplineInvestigates var data = await _context.DisciplineInvestigates
.Where(x => x.Id == id) .Where(x => x.Id == id)
.FirstOrDefaultAsync(); .FirstOrDefaultAsync();
@ -793,12 +797,16 @@ namespace BMA.EHR.DisciplineInvestigate.Service.Controllers
[HttpGet("resume/{id:guid}")] [HttpGet("resume/{id:guid}")]
public async Task<ActionResult<ResponseObject>> ResumeDisciplineInvestigate(Guid id) public async Task<ActionResult<ResponseObject>> ResumeDisciplineInvestigate(Guid id)
{ {
var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_INVESTIGATE");
if (getWorkflow == false)
{
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INVESTIGATE"); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_INVESTIGATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
}
var data = await _context.DisciplineInvestigates var data = await _context.DisciplineInvestigates
.Where(x => x.Id == id) .Where(x => x.Id == id)
.FirstOrDefaultAsync(); .FirstOrDefaultAsync();

12
BMA.EHR.Discipline.Service/Controllers/DisciplineResultController.cs
View file

@ -130,11 +130,15 @@ namespace BMA.EHR.DisciplineResult.Service.Controllers
[HttpGet("{id:guid}")] [HttpGet("{id:guid}")]
public async Task<ActionResult<ResponseObject>> GetByDisciplineResult(Guid id) public async Task<ActionResult<ResponseObject>> GetByDisciplineResult(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_RESULT"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_RESULT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_RESULT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var _data = await _context.DisciplineDisciplinarys var _data = await _context.DisciplineDisciplinarys
.Select(x => new .Select(x => new

12
BMA.EHR.Discipline.Service/Controllers/DisciplineSuspendController.cs
View file

@ -141,11 +141,15 @@ namespace BMA.EHR.DisciplineSuspend.Service.Controllers
[HttpGet("{id:guid}")] [HttpGet("{id:guid}")]
public async Task<ActionResult<ResponseObject>> GetByDisciplineSuspend(Guid id) public async Task<ActionResult<ResponseObject>> GetByDisciplineSuspend(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_SUSPENDED"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISCIPLINE_SUSPENDED");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISCIPLINE_SUSPENDED");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var _data = await _context.DisciplineReport_Profiles var _data = await _context.DisciplineReport_Profiles
.Select(x => new .Select(x => new

12
BMA.EHR.Insignia/Controllers/InsigniaManageController.cs
View file

@ -444,11 +444,15 @@ namespace BMA.EHR.Insignia.Service.Controllers
[HttpGet("org/dashboard/{insigniaManageId:length(36)}")] [HttpGet("org/dashboard/{insigniaManageId:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetListDashboardOrganization(Guid insigniaManageId) public async Task<ActionResult<ResponseObject>> GetListDashboardOrganization(Guid insigniaManageId)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_ALLOCATE"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(insigniaManageId.ToString(), "SYS_INSIGNIA_ALLOCATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_ALLOCATE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var insigniaManage = await _context.InsigniaManages.AsQueryable() var insigniaManage = await _context.InsigniaManages.AsQueryable()
.Include(x => x.InsigniaManageOrganiations) .Include(x => x.InsigniaManageOrganiations)

12
BMA.EHR.Insignia/Controllers/InsigniaPeriodController.cs
View file

@ -145,11 +145,15 @@ namespace BMA.EHR.Insignia.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetById(Guid id) public async Task<ActionResult<ResponseObject>> GetById(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_ROUND"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_INSIGNIA_ROUND");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_ROUND");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.InsigniaPeriods.AsQueryable() var data = await _context.InsigniaPeriods.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)

12
BMA.EHR.Insignia/Controllers/InsigniaRequestController.cs
View file

@ -962,11 +962,15 @@ namespace BMA.EHR.Insignia.Service.Controllers
[HttpGet("dashboard/{insigniaPeriodId:length(36)}")] [HttpGet("dashboard/{insigniaPeriodId:length(36)}")]
public async Task<ActionResult<ResponseObject>> DashboardInsigniaPeriod(Guid insigniaPeriodId) public async Task<ActionResult<ResponseObject>> DashboardInsigniaPeriod(Guid insigniaPeriodId)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_MANAGE"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(insigniaPeriodId.ToString(), "SYS_INSIGNIA_MANAGE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_MANAGE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var insigniaPeriod = await _context.InsigniaPeriods.FirstOrDefaultAsync(x => x.Id == insigniaPeriodId); var insigniaPeriod = await _context.InsigniaPeriods.FirstOrDefaultAsync(x => x.Id == insigniaPeriodId);
if (insigniaPeriod == null) if (insigniaPeriod == null)

48
BMA.EHR.Leave/Controllers/LeaveController.cs
View file

@ -1090,11 +1090,15 @@ namespace BMA.EHR.Leave.Service.Controllers
[ProducesResponseType(StatusCodes.Status500InternalServerError)] [ProducesResponseType(StatusCodes.Status500InternalServerError)]
public async Task<ActionResult<ResponseObject>> GetTimeRecordAsync([Required] Guid id) public async Task<ActionResult<ResponseObject>> GetTimeRecordAsync([Required] Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_CHECKIN"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_CHECKIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_CHECKIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var imgUrl = $"{_configuration["MinIO:Endpoint"]}{_configuration["MinIO:BucketName"]}"; var imgUrl = $"{_configuration["MinIO:Endpoint"]}{_configuration["MinIO:BucketName"]}";
@ -1476,11 +1480,15 @@ namespace BMA.EHR.Leave.Service.Controllers
[ProducesResponseType(StatusCodes.Status500InternalServerError)] [ProducesResponseType(StatusCodes.Status500InternalServerError)]
public async Task<ActionResult<ResponseObject>> GetChangeRoundHistoryByProfileIdAsync(Guid id, int page = 1, int pageSize = 10, string keyword = "") public async Task<ActionResult<ResponseObject>> GetChangeRoundHistoryByProfileIdAsync(Guid id, int page = 1, int pageSize = 10, string keyword = "")
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_WORK_ROUND_EDIT"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_WORK_ROUND_EDIT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_WORK_ROUND_EDIT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _userDutyTimeRepository.GetListByProfileIdAsync(id); var data = await _userDutyTimeRepository.GetListByProfileIdAsync(id);
@ -1836,11 +1844,15 @@ namespace BMA.EHR.Leave.Service.Controllers
[ProducesResponseType(StatusCodes.Status500InternalServerError)] [ProducesResponseType(StatusCodes.Status500InternalServerError)]
public async Task<ActionResult<ResponseObject>> GetLogRecordAsync([Required] Guid id) public async Task<ActionResult<ResponseObject>> GetLogRecordAsync([Required] Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_CHECKIN"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_CHECKIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_CHECKIN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var imgUrl = $"{_configuration["MinIO:Endpoint"]}{_configuration["MinIO:BucketName"]}"; var imgUrl = $"{_configuration["MinIO:Endpoint"]}{_configuration["MinIO:BucketName"]}";
@ -2061,11 +2073,15 @@ namespace BMA.EHR.Leave.Service.Controllers
[ProducesResponseType(StatusCodes.Status500InternalServerError)] [ProducesResponseType(StatusCodes.Status500InternalServerError)]
public async Task<ActionResult<ResponseObject>> GetCalendarByProfileAsync(Guid id) public async Task<ActionResult<ResponseObject>> GetCalendarByProfileAsync(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_WORK_ROUND_EDIT"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_WORK_ROUND_EDIT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_WORK_ROUND_EDIT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _userCalendarRepository.GetExist(id); var data = await _userCalendarRepository.GetExist(id);
if (data == null) if (data == null)

14
BMA.EHR.Leave/Controllers/LeaveRequestController.cs
View file

@ -1462,7 +1462,7 @@ namespace BMA.EHR.Leave.Service.Controllers
var _res = await client.PostAsJsonAsync(apiUrlOrg, new var _res = await client.PostAsJsonAsync(apiUrlOrg, new
{ {
refId = id, refId = id,
sysName = "LEAVE_LIST", sysName = "SYS_LEAVE_LIST",
posLevelName = profile.PosLevel?.PosLevelName ?? "", posLevelName = profile.PosLevel?.PosLevelName ?? "",
posTypeName = profile.PosType?.PosTypeName ?? "", posTypeName = profile.PosType?.PosTypeName ?? "",
}); });
@ -1512,11 +1512,15 @@ namespace BMA.EHR.Leave.Service.Controllers
[ProducesResponseType(StatusCodes.Status500InternalServerError)] [ProducesResponseType(StatusCodes.Status500InternalServerError)]
public async Task<ActionResult<ResponseObject>> GetLeaveRequestForAdminByIdAsync(Guid id) public async Task<ActionResult<ResponseObject>> GetLeaveRequestForAdminByIdAsync(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_LEAVE_LIST"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_LEAVE_LIST");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_LEAVE_LIST");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var userId = UserId == null ? Guid.Empty : Guid.Parse(UserId); var userId = UserId == null ? Guid.Empty : Guid.Parse(UserId);

12
BMA.EHR.Placement.Service/Controllers/PlacementAppointmentController.cs
View file

@ -205,11 +205,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PROMOTION_OFFICER"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_PROMOTION_OFFICER");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PROMOTION_OFFICER");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.PlacementAppointments.AsQueryable() var data = await _context.PlacementAppointments.AsQueryable()
.Where(x => x.type == "OFFICER") .Where(x => x.type == "OFFICER")

12
BMA.EHR.Placement.Service/Controllers/PlacementAppointmentEmployeeController.cs
View file

@ -201,11 +201,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PROMOTION_EMP"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_PROMOTION_EMP");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PROMOTION_EMP");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.PlacementAppointments.AsQueryable() var data = await _context.PlacementAppointments.AsQueryable()
.Where(x => x.type == "EMPLOYEE") .Where(x => x.type == "EMPLOYEE")

36
BMA.EHR.Placement.Service/Controllers/PlacementController.cs
View file

@ -133,11 +133,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("pass/{examId:length(36)}")] [HttpGet("pass/{examId:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetExamByPlacement(Guid examId) public async Task<ActionResult<ResponseObject>> GetExamByPlacement(Guid examId)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(examId.ToString(), "SYS_PLACEMENT_PASS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
if (PlacementAdmin == true) if (PlacementAdmin == true)
{ {
@ -783,11 +787,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("pass/deferment/{personalId:length(36)}")] [HttpGet("pass/deferment/{personalId:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetPersonDeferment(Guid personalId) public async Task<ActionResult<ResponseObject>> GetPersonDeferment(Guid personalId)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(personalId.ToString(), "SYS_PLACEMENT_PASS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var person = await _context.PlacementProfiles.Include(x => x.ReliefDoc).FirstOrDefaultAsync(x => x.Id == personalId); var person = await _context.PlacementProfiles.Include(x => x.ReliefDoc).FirstOrDefaultAsync(x => x.Id == personalId);
if (person == null) if (person == null)
@ -804,11 +812,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("pass/disclaim/{personalId:length(36)}")] [HttpGet("pass/disclaim/{personalId:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetPersonDisclaim(Guid personalId) public async Task<ActionResult<ResponseObject>> GetPersonDisclaim(Guid personalId)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(personalId.ToString(), "SYS_PLACEMENT_PASS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var person = await _context.PlacementProfiles.FindAsync(personalId); var person = await _context.PlacementProfiles.FindAsync(personalId);
if (person == null) if (person == null)

12
BMA.EHR.Placement.Service/Controllers/PlacementOfficerController.cs
View file

@ -310,11 +310,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TEMPDUTY"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_TEMPDUTY");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TEMPDUTY");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.PlacementOfficers.AsQueryable() var data = await _context.PlacementOfficers.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)

12
BMA.EHR.Placement.Service/Controllers/PlacementReceiveController.cs
View file

@ -217,11 +217,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_RECEIVE"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_TRANSFER_RECEIVE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_RECEIVE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.PlacementReceives.AsQueryable() var data = await _context.PlacementReceives.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)

12
BMA.EHR.Placement.Service/Controllers/PlacementRepatriationController.cs
View file

@ -189,11 +189,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TEMPDUTY2"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_TEMPDUTY2");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TEMPDUTY2");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.PlacementRepatriations.AsQueryable() var data = await _context.PlacementRepatriations.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)

14
BMA.EHR.Placement.Service/Controllers/PlacementTransferController.cs
View file

@ -383,11 +383,15 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_REQ"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_TRANSFER_REQ");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_REQ");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.PlacementTransfers.AsQueryable() var data = await _context.PlacementTransfers.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)
@ -601,7 +605,7 @@ namespace BMA.EHR.Placement.Service.Controllers
var _res = await client.PostAsJsonAsync(apiUrlOrg, new var _res = await client.PostAsJsonAsync(apiUrlOrg, new
{ {
refId = placementTransfer.Id, refId = placementTransfer.Id,
sysName = "PLACEMENT_TRANSFER", sysName = "SYS_TRANSFER_REQ",
posLevelName = placementTransfer.posLevelNameOld, posLevelName = placementTransfer.posLevelNameOld,
posTypeName = placementTransfer.posTypeNameOld, posTypeName = placementTransfer.posTypeNameOld,
}); });

38
BMA.EHR.Report.Service/Controllers/InsigniaReportController.cs
View file

@ -388,11 +388,15 @@ namespace BMA.EHR.Report.Service.Controllers
{ {
try try
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_INSIGNIA_REPORT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var mimeType = ""; var mimeType = "";
switch (exportType.Trim().ToLower()) switch (exportType.Trim().ToLower())
@ -430,11 +434,15 @@ namespace BMA.EHR.Report.Service.Controllers
{ {
try try
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_INSIGNIA_REPORT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _repository.GetSummaryCoinReport(id); var data = await _repository.GetSummaryCoinReport(id);
var SummaryTotal = await _repository.GetSummaryTotalCoinReport(id); var SummaryTotal = await _repository.GetSummaryTotalCoinReport(id);
@ -508,11 +516,15 @@ namespace BMA.EHR.Report.Service.Controllers
{ {
try try
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_INSIGNIA_REPORT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_INSIGNIA_REPORT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
//Guid ids = Guid.Parse(id); //Guid ids = Guid.Parse(id);
@ -567,7 +579,7 @@ namespace BMA.EHR.Report.Service.Controllers
{ {
status = true; status = true;
} }
else if(check == 50) else if (check == 50)
{ {
status = false; status = false;
check = 0; check = 0;

12
BMA.EHR.Retirement.Service/Controllers/RetirementController.cs
View file

@ -748,11 +748,15 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("{retireId:length(36)}")] [HttpGet("{retireId:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetProfileRetirement(Guid retireId) public async Task<ActionResult<ResponseObject>> GetProfileRetirement(Guid retireId)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_RETIREMENT"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(retireId.ToString(), "SYS_RETIREMENT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_RETIREMENT");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var retire = await _context.RetirementPeriods var retire = await _context.RetirementPeriods
.Include(x => x.RetirementProfiles) .Include(x => x.RetirementProfiles)

12
BMA.EHR.Retirement.Service/Controllers/RetirementDeceasedController.cs
View file

@ -520,11 +520,15 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("detail/{id:length(36)}")] [HttpGet("detail/{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetail(Guid id) public async Task<ActionResult<ResponseObject>> GetDetail(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PASSAWAY"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_PASSAWAY");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PASSAWAY");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.RetirementDeceasedNotis.AsQueryable() var data = await _context.RetirementDeceasedNotis.AsQueryable()
.Where(x => x.RetirementDeceased.Id == id) .Where(x => x.RetirementDeceased.Id == id)

12
BMA.EHR.Retirement.Service/Controllers/RetirementOtherController.cs
View file

@ -185,11 +185,15 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_OTHER"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_PLACEMENT_OTHER");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_OTHER");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.RetirementOthers.AsQueryable() var data = await _context.RetirementOthers.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)

12
BMA.EHR.Retirement.Service/Controllers/RetirementOutController.cs
View file

@ -164,11 +164,15 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISMISS"); var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_DISMISS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); if (getWorkflow == false)
if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISMISS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
} }
var data = await _context.RetirementOuts.AsQueryable() var data = await _context.RetirementOuts.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)

12
BMA.EHR.Retirement.Service/Controllers/RetirementResignController.cs
View file

@ -220,6 +220,16 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getWorkflow = await _permission.GetPermissionAPIWorkflowAsync(id.ToString(), "SYS_RESIGN");
if (getWorkflow == false)
{
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_RESIGN");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
}
var data = await _context.RetirementResigns.AsQueryable() var data = await _context.RetirementResigns.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)
.Select(p => new .Select(p => new
@ -516,7 +526,7 @@ namespace BMA.EHR.Retirement.Service.Controllers
var _res = await client.PostAsJsonAsync($"{_configuration["API"]}/org/workflow/add-workflow", new var _res = await client.PostAsJsonAsync($"{_configuration["API"]}/org/workflow/add-workflow", new
{ {
refId = retirementResign.Id, refId = retirementResign.Id,
sysName = "RETIREMENT_RESIFNATION", sysName = "SYS_RESIGN",
posLevelName = retirementResign.PositionLevelOld, posLevelName = retirementResign.PositionLevelOld,
posTypeName = retirementResign.PositionTypeOld, posTypeName = retirementResign.PositionTypeOld,
}); });