hrms-bangkok/hrms-api-backend
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages 7 Wiki Activity Actions

API ลบรายการเฉพาะสิทธิ์ OWNER #1586
All checks were successful
Build & Deploy Leave Service / build (push) Successful in 2m5s
Details
Build & Deploy Placement Service / build (push) Successful in 1m43s
Details
Build & Deploy Retirement Service / build (push) Successful in 1m47s
Details

Browse source
This commit is contained in:
harid 2026-05-28 14:53:32 +07:00
parent 3f98e07419
commit dc5ac329e2
7 changed files with 268 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
BMA.EHR.Leave/Controllers/LeaveReportController.cs
View file

@ -1352,7 +1352,7 @@ namespace BMA.EHR.Leave.Service.Controllers
}
else
{
profile = await _userProfileRepository.GetEmployeeByAdminRole(AccessToken, profileAdmin?.Node, nodeId, role, req.revisionId, req.node, req.nodeId, req.StartDate.Date, req.EndDate.Date);
profile = await _userProfileRepository.GetEmployeeByAdminRolev2(AccessToken, profileAdmin?.Node, nodeId, role, req.revisionId, req.node, req.nodeId, req.StartDate.Date, req.EndDate.Date);
}
// get leave day
var leaveDays = await _leaveRequestRepository.GetSumApproveLeaveByTypeAndRange(req.StartDate, req.EndDate);
@ -2380,7 +2380,7 @@ namespace BMA.EHR.Leave.Service.Controllers
}
else
{
profile = await _userProfileRepository.GetEmployeeByAdminRole(AccessToken, profileAdmin?.Node, nodeId, role, req.revisionId, req.node, req.nodeId, req.StartDate.Date, req.EndDate.Date);
profile = await _userProfileRepository.GetEmployeeByAdminRolev2(AccessToken, profileAdmin?.Node, nodeId, role, req.revisionId, req.node, req.nodeId, req.StartDate.Date, req.EndDate.Date);
}
// Child กรองตามที่ fe ส่งมาอีกชั้น
if ((role == "ROOT" || role == "OWNER" || role == "CHILD" || role == "PARENT" || role == "BROTHER") /*&& req.node > profileAdmin?.Node*/)

39
BMA.EHR.Leave/Controllers/LeaveRequestController.cs
View file

@ -2134,6 +2134,45 @@ namespace BMA.EHR.Leave.Service.Controllers
return Success();
}
/// <summary>
/// API ลบรายการการลา (ADMIN)
/// </summary>
/// <returns>
/// </returns>
/// <response code="200">เมื่อทำรายการสำเร็จ</response>
/// <response code="401">ไม่ได้ Login เข้าระบบ</response>
/// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
[HttpDelete("admin/{id:guid}")]
[ProducesResponseType(StatusCodes.Status200OK)]
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
[ProducesResponseType(StatusCodes.Status500InternalServerError)]
public async Task<ActionResult<ResponseObject>> DeleteLeaveRequestForAdminAsync(Guid id)
{
var jsonData = await _permission.GetPermissionWithActingAPIAsync("DELETE", "SYS_LEAVE_LIST");
if (jsonData!.status != 200)
{
return Error(jsonData.message, StatusCodes.Status403Forbidden);
}
// ตรวจสอบว่า role ต้องเป็น OWNER เท่านั้น
if (jsonData.result.privilege != "OWNER")
{
return Error("ไม่มีสิทธิ์ในการลบรายการขอลา", StatusCodes.Status403Forbidden);
}
var deleted = await _leaveRequestRepository.GetByIdAsync(id);
if (deleted == null)
return Error(GlobalMessages.DataNotFound);
// ห้ามลบเฉพาะสถานะ APPROVE, DELETING, DELETE
if (new[] { "APPROVE", "DELETING", "DELETE" }.Contains(deleted.LeaveStatus))
{
return Error("ไม่สามารถลบรายการขอลาสถานะนี้ได้");
}
await _leaveRequestRepository.DeleteAsync(deleted);
return Success();
}
/// <summary>
/// LV2_014 - รายการขอยกเลิกการลา (ADMIN)
/// </summary>