hrms-bangkok/hrms-api-backend
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages 7 Wiki Activity Actions

กรองสิทธิ์หน้ารายชื่อผู้ถูกพักราชการ #2084

Browse source
This commit is contained in:
harid 2025-12-22 16:16:07 +07:00
parent fb282915d1
commit fd8e0e78b6
1 changed files with 81 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

85
BMA.EHR.Discipline.Service/Controllers/DisciplineSuspendController.cs
View file

@ -1,10 +1,13 @@
using BMA.EHR.Application.Repositories; using BMA.EHR.Application.Repositories;
using BMA.EHR.Application.Repositories.MessageQueue; using BMA.EHR.Application.Repositories.MessageQueue;
using BMA.EHR.Application.Responses.Profiles;
using BMA.EHR.Discipline.Service.Requests; using BMA.EHR.Discipline.Service.Requests;
using BMA.EHR.Domain.Common; using BMA.EHR.Domain.Common;
using BMA.EHR.Domain.Models.Discipline; using BMA.EHR.Domain.Models.Discipline;
using BMA.EHR.Domain.Shared; using BMA.EHR.Domain.Shared;
using BMA.EHR.Infrastructure.Persistence; using BMA.EHR.Infrastructure.Persistence;
using Elasticsearch.Net;
// using BMA.EHR.Placement.Service.Requests; // using BMA.EHR.Placement.Service.Requests;
using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc; using Microsoft.AspNetCore.Mvc;
@ -29,24 +32,25 @@ namespace BMA.EHR.DisciplineSuspend.Service.Controllers
private readonly MinIODisciplineService _documentService; private readonly MinIODisciplineService _documentService;
private readonly IHttpContextAccessor _httpContextAccessor; private readonly IHttpContextAccessor _httpContextAccessor;
private readonly PermissionRepository _permission; private readonly PermissionRepository _permission;
private readonly UserProfileRepository _userProfileRepository;
public DisciplineSuspendController(DisciplineDbContext context, public DisciplineSuspendController(DisciplineDbContext context,
MinIODisciplineService documentService, MinIODisciplineService documentService,
IHttpContextAccessor httpContextAccessor, IHttpContextAccessor httpContextAccessor,
PermissionRepository permission) PermissionRepository permission,
UserProfileRepository userProfileRepository)
{ {
// _repository = repository; // _repository = repository;
_context = context; _context = context;
_documentService = documentService; _documentService = documentService;
_httpContextAccessor = httpContextAccessor; _httpContextAccessor = httpContextAccessor;
_permission = permission; _permission = permission;
_userProfileRepository = userProfileRepository;
} }
#region " Properties " #region " Properties "
private string? UserId => _httpContextAccessor?.HttpContext?.User?.FindFirst(ClaimTypes.NameIdentifier)?.Value; private string? UserId => _httpContextAccessor?.HttpContext?.User?.FindFirst(ClaimTypes.NameIdentifier)?.Value;
private string? FullName => _httpContextAccessor?.HttpContext?.User?.FindFirst("name")?.Value; private string? FullName => _httpContextAccessor?.HttpContext?.User?.FindFirst("name")?.Value;
private string? AccessToken => _httpContextAccessor?.HttpContext?.Request.Headers["Authorization"];
#endregion #endregion
@ -67,6 +71,41 @@ namespace BMA.EHR.DisciplineSuspend.Service.Controllers
{ {
return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
} }
// กรองสิทธิ์
string role = jsonData["result"]?.ToString() ?? "";
var nodeId = string.Empty;
var profileAdmin = new GetUserOCAllDto();
profileAdmin = await _userProfileRepository.GetUserOCAll(Guid.Parse(UserId!), AccessToken);
if (role == "NORMAL" || role == "CHILD")
{
nodeId = profileAdmin?.Node == 4
? profileAdmin?.Child4DnaId
: profileAdmin?.Node == 3
? profileAdmin?.Child3DnaId
: profileAdmin?.Node == 2
? profileAdmin?.Child2DnaId
: profileAdmin?.Node == 1
? profileAdmin?.Child1DnaId
: profileAdmin?.Node == 0
? profileAdmin?.RootDnaId
: "";
}
else if (role == "BROTHER")
{
nodeId = profileAdmin?.Node == 4
? profileAdmin?.Child3DnaId
: profileAdmin?.Node == 3
? profileAdmin?.Child2DnaId
: profileAdmin?.Node == 2
? profileAdmin?.Child1DnaId
: profileAdmin?.Node == 1 || profileAdmin?.Node == 0
? profileAdmin?.RootDnaId
: "";
}
else if (role == "ROOT" || role == "PARENT")
{
nodeId = profileAdmin?.RootDnaId;
}
var data_search = (from x in _context.DisciplineReport_Profiles.Include(x => x.DisciplineDisciplinary) var data_search = (from x in _context.DisciplineReport_Profiles.Include(x => x.DisciplineDisciplinary)
where where
( (
@ -98,6 +137,44 @@ namespace BMA.EHR.DisciplineSuspend.Service.Controllers
( (
!string.IsNullOrEmpty(status) ? x.Status!.Trim().ToUpper() == status : true !string.IsNullOrEmpty(status) ? x.Status!.Trim().ToUpper() == status : true
) )
&&
(
role == "OWNER"
? true
: role == "ROOT"
? x.rootDnaId == nodeId
: role == "PARENT"
? x.rootDnaId == nodeId && x.child1DnaId != null
: role == "CHILD"
? (
profileAdmin.Node == 4 ? x.child4DnaId == nodeId :
profileAdmin.Node == 3 ? x.child3DnaId == nodeId :
profileAdmin.Node == 2 ? x.child2DnaId == nodeId :
profileAdmin.Node == 1 ? x.child1DnaId == nodeId :
profileAdmin.Node == 0 ? x.rootDnaId == nodeId :
true
)
: role == "BROTHER"
? (
profileAdmin.Node == 4 ? x.child3DnaId == nodeId :
profileAdmin.Node == 3 ? x.child2DnaId == nodeId :
profileAdmin.Node == 2 ? x.child1DnaId == nodeId :
(
profileAdmin.Node == 1 || profileAdmin.Node == 0
)
? x.rootDnaId == nodeId : true
)
: role == "NORMAL"
? (
profileAdmin.Node == 0 ? x.rootDnaId == nodeId && x.child1DnaId == null :
profileAdmin.Node == 1 ? x.child1DnaId == nodeId && x.child2DnaId == null :
profileAdmin.Node == 2 ? x.child2DnaId == nodeId && x.child3DnaId == null :
profileAdmin.Node == 3 ? x.child3DnaId == nodeId && x.child4DnaId == null :
profileAdmin.Node == 4 ? x.child4DnaId == nodeId :
true
)
: true
)
select x).ToList(); select x).ToList();
var query = data_search var query = data_search
.Select(x => new .Select(x => new