แก้ไขสิทธิ์

This commit is contained in:
kittapath 2025-06-23 18:43:09 +07:00
parent 27acadbb07
commit c6fee999eb
2 changed files with 23 additions and 8 deletions

View file

@ -188,6 +188,7 @@ namespace BMA.EHR.Placement.Service.Controllers
p.posLevelOldId,
p.posLevelNameOld,
p.CreatedAt,
p.CreatedUserId,
p.profileId,
p.rootDnaId,
p.child1DnaId,
@ -206,17 +207,17 @@ namespace BMA.EHR.Placement.Service.Controllers
if (role == "OWNER" || role == "CHILD")
{
placementReceives = placementReceives
.Where(x => node == 4 ? x.child4DnaId == nodeId : (node == 3 ? x.child3DnaId == nodeId : (node == 2 ? x.child2DnaId == nodeId : (node == 1 ? x.child1DnaId == nodeId : (node == 0 ? x.rootDnaId == nodeId : (node == null ? true : true)))))).ToList();
.Where(x => (node == 4 ? x.child4DnaId == nodeId : (node == 3 ? x.child3DnaId == nodeId : (node == 2 ? x.child2DnaId == nodeId : (node == 1 ? x.child1DnaId == nodeId : (node == 0 ? x.rootDnaId == nodeId : (node == null ? true : true)))))) || (x.CreatedUserId == UserId)).ToList();
}
else if (role == "ROOT")
{
placementReceives = placementReceives
.Where(x => x.rootDnaId == nodeId).ToList();
.Where(x => (x.rootDnaId == nodeId) || (x.CreatedUserId == UserId)).ToList();
}
else if (role == "NORMAL")
{
placementReceives = placementReceives
.Where(x => node == 0 ? x.child1DnaId == null : (node == 1 ? x.child2DnaId == null : (node == 2 ? x.child3DnaId == null : (node == 3 ? x.child4DnaId == null : true)))).ToList();
.Where(x => (node == 0 ? x.child1DnaId == null : (node == 1 ? x.child2DnaId == null : (node == 2 ? x.child3DnaId == null : (node == 3 ? x.child4DnaId == null : true)))) || (x.CreatedUserId == UserId)).ToList();
}
return Success(placementReceives);
}

View file

@ -77,13 +77,27 @@ namespace BMA.EHR.Retirement.Service.Controllers
[HttpGet("{type}")]
public async Task<ActionResult<ResponseObject>> GetListByAdmin(string type, string? status = "WAITTING")
{
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_DISMISS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
string role = "";
if (type.Trim().ToUpper() == "OFFICER")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_DISMISS");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
role = jsonData["result"]?.ToString();
}
else
{
var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_DISMISS_EMP");
var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
if (jsonData["status"]?.ToString() != "200")
{
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
}
role = jsonData["result"]?.ToString();
}
string role = jsonData["result"]?.ToString();
var nodeId = string.Empty;
var profileAdmin = new GetUserOCAllDto();
profileAdmin = await _userProfileRepository.GetUserOCAll(Guid.Parse(UserId!), AccessToken);