เช็ค สิทธิ์โครงสร้าง

This commit is contained in:
kittapath 2024-09-13 17:38:11 +07:00
parent 9dca259981
commit 40440ca250

View file

@ -617,15 +617,16 @@ export class OrganizationController extends Controller {
if (!orgRevision) { if (!orgRevision) {
throw new HttpError(HttpStatusCode.NOT_FOUND, "ไม่พบข้อมูล"); throw new HttpError(HttpStatusCode.NOT_FOUND, "ไม่พบข้อมูล");
} }
let attrOwnership = null;
if ( if (!request.user.role.includes("SUPER_ADMIN")) {
!request.user.role.includes("SUPER_ADMIN") && let _privilege = await new permission().PermissionOrgList(request, "SYS_ORG");
orgRevision.orgRevisionIsCurrent == true && attrOwnership = _privilege.root == null ? true : false;
orgRevision.orgRevisionIsDraft == false
) {
await new permission().PermissionList(request, "SYS_ORG");
} }
if (orgRevision.orgRevisionIsDraft == true && orgRevision.orgRevisionIsCurrent == false) { if (
orgRevision.orgRevisionIsDraft == true &&
orgRevision.orgRevisionIsCurrent == false &&
attrOwnership == false
) {
const profile = await this.profileRepo.findOne({ const profile = await this.profileRepo.findOne({
where: { keycloak: request.user.sub }, where: { keycloak: request.user.sub },
relations: ["permissionProfiles"], relations: ["permissionProfiles"],