add action GET, LIST

This commit is contained in:
Bright 2024-08-21 17:59:08 +07:00
parent 8575cb7141
commit 6c37bc5e72
13 changed files with 249 additions and 552 deletions

File diff suppressed because it is too large Load diff

View file

@ -71,6 +71,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet()] [HttpGet()]
public async Task<ActionResult<ResponseObject>> GetListByAdmin() public async Task<ActionResult<ResponseObject>> GetListByAdmin()
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_PROMOTION_OFFICER");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var placementAppointments = await _context.PlacementAppointments.AsQueryable() var placementAppointments = await _context.PlacementAppointments.AsQueryable()
.Where(x => x.type == "OFFICER") .Where(x => x.type == "OFFICER")
.OrderByDescending(x => x.CreatedAt) .OrderByDescending(x => x.CreatedAt)
@ -173,6 +179,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PROMOTION_OFFICER");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.PlacementAppointments.AsQueryable() var data = await _context.PlacementAppointments.AsQueryable()
.Where(x => x.type == "OFFICER") .Where(x => x.type == "OFFICER")
.Where(x => x.Id == id) .Where(x => x.Id == id)
@ -360,15 +372,6 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost()] [HttpPost()]
public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementAddProfileRequest req) public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementAddProfileRequest req)
{ {
//var action = "CREATE";
//var system = "SYS_PROMOTION_OFFICER";
//var getPermission = await _permission.GetPermissionAPIAsync(action, system);
//var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
//if (jsonData["status"]?.ToString() != "200")
//{
// return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
//}
//var attrPrivilege = jsonData["result"]?.ToString();
var placementAppointment = new PlacementAppointment var placementAppointment = new PlacementAppointment
{ {
// Profile = profile, // Profile = profile,
@ -576,15 +579,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("{id:length(36)}")] [HttpPut("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementAppointmentEditRequest req, Guid id) public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementAppointmentEditRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_PROMOTION_OFFICER");
var system = "SYS_PROMOTION_OFFICER";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.PlacementAppointments var uppdated = await _context.PlacementAppointments
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -630,15 +630,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpDelete("{id:length(36)}")] [HttpDelete("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Delete(Guid id) public async Task<ActionResult<ResponseObject>> Delete(Guid id)
{ {
var action = "DELETE"; var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_PROMOTION_OFFICER");
var system = "SYS_PROMOTION_OFFICER";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var deleted = await _context.PlacementAppointments.AsQueryable() var deleted = await _context.PlacementAppointments.AsQueryable()
.Include(x => x.PlacementAppointmentDocs) .Include(x => x.PlacementAppointmentDocs)
.ThenInclude(x => x.Document) .ThenInclude(x => x.Document)
@ -675,15 +672,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("report")] [HttpPut("report")]
public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req) public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_PROMOTION_OFFICER");
var system = "SYS_PROMOTION_OFFICER";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
foreach (var item in req.Id) foreach (var item in req.Id)
{ {
var uppdated = await _context.PlacementAppointments var uppdated = await _context.PlacementAppointments

View file

@ -71,6 +71,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet()] [HttpGet()]
public async Task<ActionResult<ResponseObject>> GetListByAdmin() public async Task<ActionResult<ResponseObject>> GetListByAdmin()
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_PROMOTION_EMP");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var placementAppointments = await _context.PlacementAppointments.AsQueryable() var placementAppointments = await _context.PlacementAppointments.AsQueryable()
.Where(x => x.type == "EMPLOYEE") .Where(x => x.type == "EMPLOYEE")
.OrderByDescending(x => x.CreatedAt) .OrderByDescending(x => x.CreatedAt)
@ -171,6 +177,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PROMOTION_EMP");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.PlacementAppointments.AsQueryable() var data = await _context.PlacementAppointments.AsQueryable()
.Where(x => x.type == "EMPLOYEE") .Where(x => x.type == "EMPLOYEE")
.Where(x => x.Id == id) .Where(x => x.Id == id)
@ -356,15 +368,6 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost()] [HttpPost()]
public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementAddProfileRequest req) public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementAddProfileRequest req)
{ {
//var action = "CREATE";
//var system = "SYS_PROMOTION_EMP";
//var getPermission = await _permission.GetPermissionAPIAsync(action, system);
//var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
//if (jsonData["status"]?.ToString() != "200")
//{
// return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
//}
//var attrPrivilege = jsonData["result"]?.ToString();
var placementAppointment = new PlacementAppointment var placementAppointment = new PlacementAppointment
{ {
// Profile = profile, // Profile = profile,
@ -573,15 +576,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("{id:length(36)}")] [HttpPut("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementAppointmentEditRequest req, Guid id) public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementAppointmentEditRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_PROMOTION_EMP");
var system = "SYS_PROMOTION_EMP";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.PlacementAppointments var uppdated = await _context.PlacementAppointments
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -616,15 +616,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpDelete("{id:length(36)}")] [HttpDelete("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Delete(Guid id) public async Task<ActionResult<ResponseObject>> Delete(Guid id)
{ {
var action = "DELETE"; var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_PROMOTION_EMP");
var system = "SYS_PROMOTION_EMP";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var deleted = await _context.PlacementAppointments.AsQueryable() var deleted = await _context.PlacementAppointments.AsQueryable()
.Include(x => x.PlacementAppointmentDocs) .Include(x => x.PlacementAppointmentDocs)
.ThenInclude(x => x.Document) .ThenInclude(x => x.Document)
@ -661,15 +658,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost("report")] [HttpPost("report")]
public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req) public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_PROMOTION_EMP");
var system = "SYS_PROMOTION_EMP";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
foreach (var item in req.Id) foreach (var item in req.Id)
{ {
var uppdated = await _context.PlacementAppointments var uppdated = await _context.PlacementAppointments

View file

@ -629,15 +629,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost("pass/deferment"), DisableRequestSizeLimit] [HttpPost("pass/deferment"), DisableRequestSizeLimit]
public async Task<ActionResult<ResponseObject>> UpdatePersonDeferment([FromForm] PersonDefermentRequest req) public async Task<ActionResult<ResponseObject>> UpdatePersonDeferment([FromForm] PersonDefermentRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_PLACEMENT_PASS");
var system = "SYS_PLACEMENT_PASS";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var person = await _context.PlacementProfiles.FindAsync(Request.Form.ContainsKey("personalId") ? Guid.Parse(Request.Form["personalId"]) : Guid.Parse("00000000-0000-0000-0000-000000000000")); var person = await _context.PlacementProfiles.FindAsync(Request.Form.ContainsKey("personalId") ? Guid.Parse(Request.Form["personalId"]) : Guid.Parse("00000000-0000-0000-0000-000000000000"));
if (person == null) if (person == null)
return Error(GlobalMessages.DataNotFound, 404); return Error(GlobalMessages.DataNotFound, 404);
@ -664,15 +661,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost("pass/disclaim")] [HttpPost("pass/disclaim")]
public async Task<ActionResult<ResponseObject>> UpdatePersonDisclaim([FromBody] PersonDisclaimRequest req) public async Task<ActionResult<ResponseObject>> UpdatePersonDisclaim([FromBody] PersonDisclaimRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_PLACEMENT_PASS");
var system = "SYS_PLACEMENT_PASS";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var person = await _context.PlacementProfiles var person = await _context.PlacementProfiles
.Include(x => x.OrganizationPosition) .Include(x => x.OrganizationPosition)
.Include(x => x.PositionNumber) .Include(x => x.PositionNumber)
@ -739,6 +733,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("pass/deferment/{personalId:length(36)}")] [HttpGet("pass/deferment/{personalId:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetPersonDeferment(Guid personalId) public async Task<ActionResult<ResponseObject>> GetPersonDeferment(Guid personalId)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var person = await _context.PlacementProfiles.Include(x => x.ReliefDoc).FirstOrDefaultAsync(x => x.Id == personalId); var person = await _context.PlacementProfiles.Include(x => x.ReliefDoc).FirstOrDefaultAsync(x => x.Id == personalId);
if (person == null) if (person == null)
return Error(GlobalMessages.DataNotFound, 404); return Error(GlobalMessages.DataNotFound, 404);
@ -754,6 +754,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("pass/disclaim/{personalId:length(36)}")] [HttpGet("pass/disclaim/{personalId:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetPersonDisclaim(Guid personalId) public async Task<ActionResult<ResponseObject>> GetPersonDisclaim(Guid personalId)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_PASS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var person = await _context.PlacementProfiles.FindAsync(personalId); var person = await _context.PlacementProfiles.FindAsync(personalId);
if (person == null) if (person == null)
return Error(GlobalMessages.DataNotFound, 404); return Error(GlobalMessages.DataNotFound, 404);
@ -1154,15 +1160,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("position/{personalId:length(36)}")] [HttpPut("position/{personalId:length(36)}")]
public async Task<ActionResult<ResponseObject>> UpdatePositionDraft([FromBody] List<Guid> items, Guid personalId) public async Task<ActionResult<ResponseObject>> UpdatePositionDraft([FromBody] List<Guid> items, Guid personalId)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_PLACEMENT_PASS");
var system = "SYS_PLACEMENT_PASS";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var placement = await _context.Placements var placement = await _context.Placements
.FirstOrDefaultAsync(x => x.Id == personalId); .FirstOrDefaultAsync(x => x.Id == personalId);
if (placement == null) if (placement == null)
@ -1248,15 +1251,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("date/update/{personalId:length(36)}")] [HttpPut("date/update/{personalId:length(36)}")]
public async Task<ActionResult<ResponseObject>> UpdateDateDraft([FromBody] PersonDateRequest req, Guid personalId) public async Task<ActionResult<ResponseObject>> UpdateDateDraft([FromBody] PersonDateRequest req, Guid personalId)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_PLACEMENT_PASS");
var system = "SYS_PLACEMENT_PASS";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var profile = await _context.PlacementProfiles var profile = await _context.PlacementProfiles
.FirstOrDefaultAsync(x => x.Id == personalId); .FirstOrDefaultAsync(x => x.Id == personalId);
if (profile == null) if (profile == null)

View file

@ -71,6 +71,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet()] [HttpGet()]
public async Task<ActionResult<ResponseObject>> GetListByAdmin() public async Task<ActionResult<ResponseObject>> GetListByAdmin()
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_TEMPDUTY");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var rootId = ""; var rootId = "";
var child1Id = ""; var child1Id = "";
var child2Id = ""; var child2Id = "";
@ -279,6 +285,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TEMPDUTY");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.PlacementOfficers.AsQueryable() var data = await _context.PlacementOfficers.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)
.Select(p => new .Select(p => new
@ -337,15 +349,6 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost()] [HttpPost()]
public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementAddProfileRequest req) public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementAddProfileRequest req)
{ {
//var action = "CREATE";
//var system = "SYS_TEMPDUTY";
//var getPermission = await _permission.GetPermissionAPIAsync(action, system);
//var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
//if (jsonData["status"]?.ToString() != "200")
//{
// return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
//}
//var attrPrivilege = jsonData["result"]?.ToString();
var placementOfficer = new PlacementOfficer var placementOfficer = new PlacementOfficer
{ {
Organization = Request.Form.ContainsKey("Organization") ? Request.Form["Organization"] : "", Organization = Request.Form.ContainsKey("Organization") ? Request.Form["Organization"] : "",
@ -426,15 +429,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("{id:length(36)}")] [HttpPut("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementOfficerEditRequest req, Guid id) public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementOfficerEditRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_TEMPDUTY");
var system = "SYS_TEMPDUTY";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.PlacementOfficers var uppdated = await _context.PlacementOfficers
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -496,15 +496,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpDelete("{id:length(36)}")] [HttpDelete("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Delete(Guid id) public async Task<ActionResult<ResponseObject>> Delete(Guid id)
{ {
var action = "DELETE"; var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_TEMPDUTY");
var system = "SYS_TEMPDUTY";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var deleted = await _context.PlacementOfficers.AsQueryable() var deleted = await _context.PlacementOfficers.AsQueryable()
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (deleted == null) if (deleted == null)
@ -526,15 +523,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost("report")] [HttpPost("report")]
public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req) public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_TEMPDUTY");
var system = "SYS_TEMPDUTY";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
foreach (var item in req.Id) foreach (var item in req.Id)
{ {
var uppdated = await _context.PlacementOfficers var uppdated = await _context.PlacementOfficers

View file

@ -71,6 +71,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet()] [HttpGet()]
public async Task<ActionResult<ResponseObject>> GetListByAdmin(int page = 1, int pageSize = 10, string keyword = "") public async Task<ActionResult<ResponseObject>> GetListByAdmin(int page = 1, int pageSize = 10, string keyword = "")
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_TRANSFER_RECEIVE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
// var rootId = ""; // var rootId = "";
// var child1Id = ""; // var child1Id = "";
// var child2Id = ""; // var child2Id = "";
@ -206,6 +212,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_RECEIVE");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.PlacementReceives.AsQueryable() var data = await _context.PlacementReceives.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)
.Select(p => new .Select(p => new
@ -401,15 +413,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost()] [HttpPost()]
public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementReceiveRequest req) public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementReceiveRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_TRANSFER_RECEIVE");
var system = "SYS_TRANSFER_RECEIVE";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var placementReceive = new PlacementReceive var placementReceive = new PlacementReceive
{ {
// Profile = profile, // Profile = profile,
@ -554,15 +563,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("upload/{id:length(36)}")] [HttpPut("upload/{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> PostFile([FromForm] PlacementFileRequest req, Guid id) public async Task<ActionResult<ResponseObject>> PostFile([FromForm] PlacementFileRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_TRANSFER_RECEIVE");
var system = "SYS_TRANSFER_RECEIVE";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.PlacementReceives var uppdated = await _context.PlacementReceives
.Include(x => x.PlacementReceiveDocs) .Include(x => x.PlacementReceiveDocs)
.ThenInclude(x => x.Document) .ThenInclude(x => x.Document)
@ -700,15 +706,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("{id:length(36)}")] [HttpPut("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementReceiveEditRequest req, Guid id) public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementReceiveEditRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_TRANSFER_RECEIVE");
var system = "SYS_TRANSFER_RECEIVE";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.PlacementReceives var uppdated = await _context.PlacementReceives
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -789,15 +792,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpDelete("{id:length(36)}")] [HttpDelete("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Delete(Guid id) public async Task<ActionResult<ResponseObject>> Delete(Guid id)
{ {
var action = "DELETE"; var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_TRANSFER_RECEIVE");
var system = "SYS_TRANSFER_RECEIVE";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var deleted = await _context.PlacementReceives.AsQueryable() var deleted = await _context.PlacementReceives.AsQueryable()
.Include(x => x.PlacementReceiveDocs) .Include(x => x.PlacementReceiveDocs)
.ThenInclude(x => x.Document) .ThenInclude(x => x.Document)
@ -834,15 +834,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost("report")] [HttpPost("report")]
public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req) public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_TRANSFER_RECEIVE");
var system = "SYS_TRANSFER_RECEIVE";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
foreach (var item in req.Id) foreach (var item in req.Id)
{ {
var uppdated = await _context.PlacementReceives var uppdated = await _context.PlacementReceives

View file

@ -72,6 +72,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet()] [HttpGet()]
public async Task<ActionResult<ResponseObject>> GetListByAdmin() public async Task<ActionResult<ResponseObject>> GetListByAdmin()
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_TEMPDUTY2");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var rootId = ""; var rootId = "";
var child1Id = ""; var child1Id = "";
var child2Id = ""; var child2Id = "";
@ -158,6 +164,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TEMPDUTY2");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.PlacementRepatriations.AsQueryable() var data = await _context.PlacementRepatriations.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)
.Select(p => new .Select(p => new
@ -218,15 +230,6 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost()] [HttpPost()]
public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementAddProfileRequest req) public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementAddProfileRequest req)
{ {
//var action = "CREATE";
//var system = "SYS_TEMPDUTY2";
//var getPermission = await _permission.GetPermissionAPIAsync(action, system);
//var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
//if (jsonData["status"]?.ToString() != "200")
//{
// return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
//}
//var attrPrivilege = jsonData["result"]?.ToString();
var placementRepatriation = new PlacementRepatriation var placementRepatriation = new PlacementRepatriation
{ {
Organization = Request.Form.ContainsKey("Organization") ? Request.Form["Organization"] : "", Organization = Request.Form.ContainsKey("Organization") ? Request.Form["Organization"] : "",
@ -307,15 +310,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("{id:length(36)}")] [HttpPut("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementRepatriationEditRequest req, Guid id) public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementRepatriationEditRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_TEMPDUTY2");
var system = "SYS_TEMPDUTY2";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.PlacementRepatriations var uppdated = await _context.PlacementRepatriations
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -376,15 +376,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpDelete("{id:length(36)}")] [HttpDelete("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Delete(Guid id) public async Task<ActionResult<ResponseObject>> Delete(Guid id)
{ {
var action = "DELETE"; var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_TEMPDUTY2");
var system = "SYS_TEMPDUTY2";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var deleted = await _context.PlacementRepatriations.AsQueryable() var deleted = await _context.PlacementRepatriations.AsQueryable()
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (deleted == null) if (deleted == null)
@ -406,15 +403,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost("report")] [HttpPost("report")]
public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req) public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_TEMPDUTY2");
var system = "SYS_TEMPDUTY2";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
foreach (var item in req.Id) foreach (var item in req.Id)
{ {
var uppdated = await _context.PlacementRepatriations var uppdated = await _context.PlacementRepatriations

View file

@ -144,6 +144,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet()] [HttpGet()]
public async Task<ActionResult<ResponseObject>> GetListByAdmin() public async Task<ActionResult<ResponseObject>> GetListByAdmin()
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_TRANSFER_REQ");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var rootId = ""; var rootId = "";
var child1Id = ""; var child1Id = "";
var child2Id = ""; var child2Id = "";
@ -341,6 +347,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_REQ");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.PlacementTransfers.AsQueryable() var data = await _context.PlacementTransfers.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)
.Select(p => new .Select(p => new
@ -567,15 +579,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPut("{id:length(36)}")] [HttpPut("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementTransferEditRequest req, Guid id) public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementTransferEditRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_TRANSFER_REQ");
var system = "SYS_TRANSFER_REQ";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.PlacementTransfers var uppdated = await _context.PlacementTransfers
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -685,15 +694,12 @@ namespace BMA.EHR.Placement.Service.Controllers
[HttpPost("report")] [HttpPost("report")]
public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req) public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_TRANSFER_REQ");
var system = "SYS_TRANSFER_REQ";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
foreach (var item in req.Id) foreach (var item in req.Id)
{ {
var uppdated = await _context.PlacementTransfers var uppdated = await _context.PlacementTransfers

View file

@ -319,15 +319,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPost("profile")] [HttpPost("profile")]
public async Task<ActionResult<ResponseObject>> CreateProfileRetirement([FromBody] PeriodRequest req) public async Task<ActionResult<ResponseObject>> CreateProfileRetirement([FromBody] PeriodRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_RETIREMENT");
var system = "SYS_RETIREMENT";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
if (!req.Type.Trim().ToUpper().Contains("EMPLOYEE") && !req.Type.Trim().ToUpper().Contains("OFFICER")) if (!req.Type.Trim().ToUpper().Contains("EMPLOYEE") && !req.Type.Trim().ToUpper().Contains("OFFICER"))
return Error("ประเภทพ้นราชการไม่ถูกต้อง"); return Error("ประเภทพ้นราชการไม่ถูกต้อง");
if (req.Year == 0) if (req.Year == 0)
@ -875,15 +872,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPut("profile/{retireId:length(36)}")] [HttpPut("profile/{retireId:length(36)}")]
public async Task<ActionResult<ResponseObject>> AddProfileRetirement([FromBody] ProfileRequest req, Guid retireId) public async Task<ActionResult<ResponseObject>> AddProfileRetirement([FromBody] ProfileRequest req, Guid retireId)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_RETIREMENT");
var system = "SYS_RETIREMENT";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
// var profile = await _context.Profiles // var profile = await _context.Profiles
// .FirstOrDefaultAsync(x => x.Id == req.ProfileId); // .FirstOrDefaultAsync(x => x.Id == req.ProfileId);
@ -1065,15 +1059,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPost("edit")] [HttpPost("edit")]
public async Task<ActionResult<ResponseObject>> EditReasonProfileRetirement([FromBody] ProfileRetireRequest req) public async Task<ActionResult<ResponseObject>> EditReasonProfileRetirement([FromBody] ProfileRetireRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_RETIREMENT");
var system = "SYS_RETIREMENT";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var profile = await _context.RetirementProfiles var profile = await _context.RetirementProfiles
.FirstOrDefaultAsync(x => x.Id == req.RetireProfileId); .FirstOrDefaultAsync(x => x.Id == req.RetireProfileId);
if (profile == null) if (profile == null)
@ -1187,15 +1178,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPut("upload/{retireId:length(36)}")] [HttpPut("upload/{retireId:length(36)}")]
public async Task<ActionResult<ResponseObject>> UploadRetirement([FromForm] RetirementFileRequest req, Guid retireId) public async Task<ActionResult<ResponseObject>> UploadRetirement([FromForm] RetirementFileRequest req, Guid retireId)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_RETIREMENT");
var system = "SYS_RETIREMENT";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var retire = await _context.RetirementPeriods var retire = await _context.RetirementPeriods
.FirstOrDefaultAsync(x => x.Id == retireId); .FirstOrDefaultAsync(x => x.Id == retireId);
if (retire == null) if (retire == null)
@ -1253,15 +1241,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPut("detail/{retireId:length(36)}")] [HttpPut("detail/{retireId:length(36)}")]
public async Task<ActionResult<ResponseObject>> UpdateDetailRetirement([FromForm] RetirementDetailRequest req, Guid retireId) public async Task<ActionResult<ResponseObject>> UpdateDetailRetirement([FromForm] RetirementDetailRequest req, Guid retireId)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_RETIREMENT");
var system = "SYS_RETIREMENT";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var retire = await _context.RetirementPeriods var retire = await _context.RetirementPeriods
.FirstOrDefaultAsync(x => x.Id == retireId); .FirstOrDefaultAsync(x => x.Id == retireId);
if (retire == null) if (retire == null)

View file

@ -513,6 +513,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("detail/{id:length(36)}")] [HttpGet("detail/{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetail(Guid id) public async Task<ActionResult<ResponseObject>> GetDetail(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PASSAWAY");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.RetirementDeceasedNotis.AsQueryable() var data = await _context.RetirementDeceasedNotis.AsQueryable()
.Where(x => x.RetirementDeceased.Id == id) .Where(x => x.RetirementDeceased.Id == id)
.Select(p => new .Select(p => new
@ -546,15 +552,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPut("detail/{id:length(36)}")] [HttpPut("detail/{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> UpdateDetail([FromBody] RetirementDeceasedAddNotiPersonRequest req, Guid id) public async Task<ActionResult<ResponseObject>> UpdateDetail([FromBody] RetirementDeceasedAddNotiPersonRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_PASSAWAY");
var system = "SYS_PASSAWAY";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var retirementDeceased = await _context.RetirementDeceaseds.AsQueryable() var retirementDeceased = await _context.RetirementDeceaseds.AsQueryable()
.Include(x => x.RetirementDeceasedNotis) .Include(x => x.RetirementDeceasedNotis)
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
@ -628,15 +631,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpDelete("detail/{id:length(36)}")] [HttpDelete("detail/{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> DeleteDetail(Guid id) public async Task<ActionResult<ResponseObject>> DeleteDetail(Guid id)
{ {
var action = "DELETE"; var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_PASSAWAY");
var system = "SYS_PASSAWAY";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var retirementDeceasedNoti = await _context.RetirementDeceasedNotis.AsQueryable() var retirementDeceasedNoti = await _context.RetirementDeceasedNotis.AsQueryable()
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (retirementDeceasedNoti == null) if (retirementDeceasedNoti == null)

View file

@ -71,6 +71,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet()] [HttpGet()]
public async Task<ActionResult<ResponseObject>> GetListByAdmin() public async Task<ActionResult<ResponseObject>> GetListByAdmin()
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_PLACEMENT_OTHER");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var rootId = ""; var rootId = "";
var child1Id = ""; var child1Id = "";
var child2Id = ""; var child2Id = "";
@ -157,6 +163,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_PLACEMENT_OTHER");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.RetirementOthers.AsQueryable() var data = await _context.RetirementOthers.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)
.Select(p => new .Select(p => new
@ -273,15 +285,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPost()] [HttpPost()]
public async Task<ActionResult<ResponseObject>> Post([FromForm] RetirementAddProfileRequest req) public async Task<ActionResult<ResponseObject>> Post([FromForm] RetirementAddProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_PLACEMENT_OTHER");
var system = "SYS_PLACEMENT_OTHER";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var retirementOther = new RetirementOther var retirementOther = new RetirementOther
{ {
// Profile = profile, // Profile = profile,
@ -494,15 +503,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPut("{id:length(36)}")] [HttpPut("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Put([FromBody] RetirementOtherEditRequest req, Guid id) public async Task<ActionResult<ResponseObject>> Put([FromBody] RetirementOtherEditRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_PLACEMENT_OTHER");
var system = "SYS_PLACEMENT_OTHER";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.RetirementOthers var uppdated = await _context.RetirementOthers
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -537,15 +543,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpDelete("{id:length(36)}")] [HttpDelete("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Delete(Guid id) public async Task<ActionResult<ResponseObject>> Delete(Guid id)
{ {
var action = "DELETE"; var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_PLACEMENT_OTHER");
var system = "SYS_PLACEMENT_OTHER";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var deleted = await _context.RetirementOthers.AsQueryable() var deleted = await _context.RetirementOthers.AsQueryable()
.Include(x => x.RetirementOtherDocs) .Include(x => x.RetirementOtherDocs)
.ThenInclude(x => x.Document) .ThenInclude(x => x.Document)

View file

@ -71,6 +71,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet()] [HttpGet()]
public async Task<ActionResult<ResponseObject>> GetListByAdmin() public async Task<ActionResult<ResponseObject>> GetListByAdmin()
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_DISMISS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var rootId = ""; var rootId = "";
var child1Id = ""; var child1Id = "";
var child2Id = ""; var child2Id = "";
@ -156,6 +162,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("{id:length(36)}")] [HttpGet("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id) public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
{ {
var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_DISMISS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var data = await _context.RetirementOuts.AsQueryable() var data = await _context.RetirementOuts.AsQueryable()
.Where(x => x.Id == id) .Where(x => x.Id == id)
.Select(p => new .Select(p => new
@ -338,15 +350,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPut("{id:length(36)}")] [HttpPut("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Put([FromBody] RetirementOutEditRequest req, Guid id) public async Task<ActionResult<ResponseObject>> Put([FromBody] RetirementOutEditRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_DISMISS");
var system = "SYS_DISMISS";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.RetirementOuts var uppdated = await _context.RetirementOuts
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -406,15 +415,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpDelete("{id:length(36)}")] [HttpDelete("{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> Delete(Guid id) public async Task<ActionResult<ResponseObject>> Delete(Guid id)
{ {
var action = "DELETE"; var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_DISMISS");
var system = "SYS_DISMISS";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var deleted = await _context.RetirementOuts.AsQueryable() var deleted = await _context.RetirementOuts.AsQueryable()
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (deleted == null) if (deleted == null)
@ -436,15 +442,12 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpPost("report")] [HttpPost("report")]
public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] RetirementProfileRequest req) public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] RetirementProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_DISMISS");
var system = "SYS_DISMISS";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
foreach (var item in req.Id) foreach (var item in req.Id)
{ {
var uppdated = await _context.RetirementOuts var uppdated = await _context.RetirementOuts

View file

@ -1049,15 +1049,12 @@ $"คำขอลาออกของ {updated.prefix}{updated.firstName} {upda
[HttpPost("report")] [HttpPost("report")]
public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] RetirementProfileRequest req) public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] RetirementProfileRequest req)
{ {
var action = "CREATE"; var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_RESIGN");
var system = "SYS_RESIGN";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
foreach (var item in req.Id) foreach (var item in req.Id)
{ {
var uppdated = await _context.RetirementResigns var uppdated = await _context.RetirementResigns
@ -1369,15 +1366,12 @@ $"คำขอลาออกของ {updated.prefix}{updated.firstName} {upda
[HttpPut("questionnaire/comment/{id:length(36)}")] [HttpPut("questionnaire/comment/{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> PutQuestionComment([FromBody] RetirementQuestionCommentRequest req, Guid id) public async Task<ActionResult<ResponseObject>> PutQuestionComment([FromBody] RetirementQuestionCommentRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_RESIGN_INTERVIEW");
var system = "SYS_RESIGN_INTERVIEW";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.RetirementQuestions.AsQueryable() var uppdated = await _context.RetirementQuestions.AsQueryable()
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
if (uppdated == null) if (uppdated == null)
@ -1416,15 +1410,12 @@ $"คำขอลาออกของ {updated.prefix}{updated.firstName} {upda
[HttpPut("questionnaire/appoint/{id:length(36)}")] [HttpPut("questionnaire/appoint/{id:length(36)}")]
public async Task<ActionResult<ResponseObject>> UpdateAppointQuestion([FromBody] RetirementQuestionAppointRequest req, Guid id) public async Task<ActionResult<ResponseObject>> UpdateAppointQuestion([FromBody] RetirementQuestionAppointRequest req, Guid id)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_RESIGN_INTERVIEW");
var system = "SYS_RESIGN_INTERVIEW";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.RetirementQuestions.AsQueryable() var uppdated = await _context.RetirementQuestions.AsQueryable()
.Include(x => x.RetirementResign) .Include(x => x.RetirementResign)
.FirstOrDefaultAsync(x => x.Id == id); .FirstOrDefaultAsync(x => x.Id == id);
@ -1461,6 +1452,12 @@ $"คำขอลาออกของ {updated.prefix}{updated.firstName} {upda
[HttpGet("questionnaire/question")] [HttpGet("questionnaire/question")]
public async Task<ActionResult<ResponseObject>> GetQuestionnaireQuestion() public async Task<ActionResult<ResponseObject>> GetQuestionnaireQuestion()
{ {
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_RESIGN_INTERVIEW");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
var retirementQuestionnaireQuestion = await _context.RetirementQuestionnaireQuestions.AsQueryable() var retirementQuestionnaireQuestion = await _context.RetirementQuestionnaireQuestions.AsQueryable()
.Select(x => new .Select(x => new
{ {
@ -1513,15 +1510,12 @@ $"คำขอลาออกของ {updated.prefix}{updated.firstName} {upda
[HttpPut("questionnaire/question")] [HttpPut("questionnaire/question")]
public async Task<ActionResult<ResponseObject>> UpdateQuestionnaireQuestion([FromBody] RetirementQuestionnaireQuestionRequest req) public async Task<ActionResult<ResponseObject>> UpdateQuestionnaireQuestion([FromBody] RetirementQuestionnaireQuestionRequest req)
{ {
var action = "UPDATE"; var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_RESIGN_INTERVIEW");
var system = "SYS_RESIGN_INTERVIEW";
var getPermission = await _permission.GetPermissionAPIAsync(action, system);
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission); var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200") if (jsonData["status"]?.ToString() != "200")
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
var attrPrivilege = jsonData["result"]?.ToString();
var uppdated = await _context.RetirementQuestionnaireQuestions.AsQueryable() var uppdated = await _context.RetirementQuestionnaireQuestions.AsQueryable()
.FirstOrDefaultAsync(); .FirstOrDefaultAsync();
if (uppdated == null) if (uppdated == null)