fix permission kpi

This commit is contained in:
Bright 2024-08-29 14:44:34 +07:00
parent 565d51d30b
commit 4a59e20733
3 changed files with 44 additions and 8 deletions

View file

@ -131,7 +131,7 @@ export class kpiPeriodController extends Controller {
}
/**
* API
* API (ADMIN)
* @param id Guid, *Id
*/
@Get("close/{id}")
@ -141,6 +141,7 @@ export class kpiPeriodController extends Controller {
endDate: "datetime", //วันสิ้นสุด
})
async CloseKpiPeriodById(@Path() id: string, @Request() request: RequestWithUser) {
await new permission().PermissionUpdate(request, "SYS_KPI_ROUND");
const kpiPeriod = await this.kpiPeriodRepository.findOne({
where: { id: id },
});
@ -160,7 +161,7 @@ export class kpiPeriodController extends Controller {
}
/**
* API
* API (ADMIN)
* @param id Guid, *Id
*/
@Get("open/{id}")
@ -170,6 +171,7 @@ export class kpiPeriodController extends Controller {
endDate: "datetime", //วันสิ้นสุด
})
async OpenKpiPeriodById(@Path() id: string, @Request() request: RequestWithUser) {
await new permission().PermissionGet(request, "SYS_KPI_ROUND");
const kpiPeriod = await this.kpiPeriodRepository.findOne({
where: { id: id },
});
@ -189,7 +191,7 @@ export class kpiPeriodController extends Controller {
}
/**
* API list
* API list (USER)
* @param page
* @param pageSize
* @param keyword
@ -202,7 +204,7 @@ export class kpiPeriodController extends Controller {
@Query("year") year?: number,
@Query("keyword") keyword?: string,
) {
await new permission().PermissionDelete(request, "SYS_KPI_ROUND");
// await new permission().PermissionDelete(request, "SYS_KPI_ROUND");
const [kpiPeriod, total] = await AppDataSource.getRepository(KpiPeriod)
.createQueryBuilder("kpiPeriod")
.andWhere(
@ -243,7 +245,37 @@ export class kpiPeriodController extends Controller {
}
/**
* API list
* API list (ADMIN)
* @param page
* @param pageSize
* @param keyword
*/
@Get("admin")
async listKpiPeriodAdmin(
@Request() request: RequestWithUser,
@Query("page") page: number = 1,
@Query("pageSize") pageSize: number = 10,
@Query("year") year?: number,
@Query("keyword") keyword?: string,
) {
await new permission().PermissionList(request, "SYS_KPI_ROUND");
const [kpiPeriod, total] = await AppDataSource.getRepository(KpiPeriod)
.createQueryBuilder("kpiPeriod")
.andWhere(
year !== 0 && year != null && year != undefined ? "kpiPeriod.year = :year" : "1=1",
{ year: year },
)
.orderBy("kpiPeriod.startDate", "ASC")
.addOrderBy("kpiPeriod.year", "ASC")
.skip((page - 1) * pageSize)
.take(pageSize)
.getManyAndCount();
return new HttpSuccess({ data: kpiPeriod, total });
}
/**
* API list (USER)
* @param page
* @param pageSize
* @param keyword

View file

@ -339,7 +339,7 @@ export class KpiUserDevelopmentController extends Controller {
*/
@Post("admin")
async listKpiDevelopmentByStatusKP7(
@Request() request: { user: Record<string, any> },
@Request() request: RequestWithUser,
@Body()
requestBody: {
page: number;
@ -352,6 +352,7 @@ export class KpiUserDevelopmentController extends Controller {
// evaluating?: boolean | null;
},
) {
await new permission().PermissionList(request, "SYS_RESULT");
let conditionFullName =
"CONCAT(kpiUserEvaluation.prefix, kpiUserEvaluation.firstName, ' ', kpiUserEvaluation.lastName) LIKE :keyword";
const [kpiUserDevelopment, total] = await AppDataSource.getRepository(KpiUserDevelopment)

View file

@ -76,6 +76,7 @@ export class KpiUserEvaluationController extends Controller {
evaluating?: boolean | null;
},
) {
await new permission().PermissionList(request, "SYS_KPI_ROUND");
let profileId: any = null;
await new CallAPI()
.GetData(request, "/org/profile/keycloak/position")
@ -214,7 +215,8 @@ export class KpiUserEvaluationController extends Controller {
evaluating?: boolean | null;
},
) {
await new permission().PermissionDelete(request, "SYS_RESULT");
// await new permission().PermissionDelete(request, "SYS_RESULT");
await new permission().PermissionList(request, "SYS_KPI_ROUND");
let conditionFullName =
"CONCAT(kpiUserEvaluation.prefix, kpiUserEvaluation.firstName, ' ', kpiUserEvaluation.lastName) LIKE :keyword";
const [kpiUserEvaluation, total] = await AppDataSource.getRepository(KpiUserEvaluation)
@ -331,6 +333,7 @@ export class KpiUserEvaluationController extends Controller {
evaluating?: boolean | null;
},
) {
await new permission().PermissionList(request, "SYS_KPI_LIST");
let conditionFullName =
"CONCAT(kpiUserEvaluation.prefix, kpiUserEvaluation.firstName, ' ', kpiUserEvaluation.lastName) LIKE :keyword";
const [kpiUserEvaluation, total] = await AppDataSource.getRepository(KpiUserEvaluation)
@ -438,7 +441,7 @@ export class KpiUserEvaluationController extends Controller {
@Body() requestBody: createKpiUserEvaluation,
@Request() request: RequestWithUser,
) {
await new permission().PermissionCreate(request, "SYS_KPI_LIST");
// await new permission().PermissionCreate(request, "SYS_KPI_LIST");
const kpiPeriod = await this.kpiPeriodRepository.findOne({
where: { id: requestBody.kpiPeriodId },
});