import { Body, Controller, Delete, Get, Patch, Path, Post, Request, Route, Security, Tags, } from "tsoa"; import { AppDataSource } from "../database/data-source"; import { Profile } from "../entities/Profile"; import { CreateProfileAbility, ProfileAbility, UpdateProfileAbility, } from "../entities/ProfileAbility"; import { ProfileAbilityHistory } from "../entities/ProfileAbilityHistory"; import { RequestWithUser } from "../middlewares/user"; import HttpError from "../interfaces/http-error"; import HttpStatus from "../interfaces/http-status"; import HttpSuccess from "../interfaces/http-success"; import permission from "../interfaces/permission"; @Route("api/v1/org/profile/ability") @Tags("ProfileAbility") @Security("bearerAuth") export class ProfileAbilityController extends Controller { private profileRepo = AppDataSource.getRepository(Profile); private profileAbilityRepo = AppDataSource.getRepository(ProfileAbility); private profileAbilityHistoryRepo = AppDataSource.getRepository(ProfileAbilityHistory); @Get("user") public async detailProfileAbilityUser(@Request() request: { user: Record }) { const profile = await this.profileRepo.findOneBy({ keycloak: request.user.sub }); if (!profile) { throw new HttpError(HttpStatus.BAD_REQUEST, "ไม่พบ profile ดังกล่าว"); } const getProfileAbilityId = await this.profileAbilityRepo.find({ where: { profileId: profile.id }, order: { createdAt: "ASC" }, }); if (!getProfileAbilityId) { throw new HttpError(HttpStatus.NOT_FOUND, "ไม่พบข้อมูล"); } return new HttpSuccess(getProfileAbilityId); } @Get("{profileId}") public async detailProfileAbility(@Path() profileId: string, @Request() req: RequestWithUser) { await new permission().PermissionOrgUserGet(req, "SYS_REGISTRY_OFFICER", profileId); const getProfileAbilityId = await this.profileAbilityRepo.find({ where: { profileId: profileId }, order: { createdAt: "ASC" }, }); if (!getProfileAbilityId) { throw new HttpError(HttpStatus.NOT_FOUND, "ไม่พบข้อมูล"); } return new HttpSuccess(getProfileAbilityId); } @Get("history/{abilityId}") public async getProfileAbilityHistory( @Path() abilityId: string, @Request() req: RequestWithUser, ) { // const _record = await this.profileAbilityRepo.findOne({ // where: { id: abilityId }, // }); // if (_record) { // await new permission().PermissionOrgUserGet(req, "SYS_REGISTRY_OFFICER", _record.profileId); // } const record = await this.profileAbilityHistoryRepo.find({ where: { profileAbilityId: abilityId }, order: { createdAt: "DESC" }, }); if (!record) { throw new HttpError(HttpStatus.NOT_FOUND, "ไม่พบข้อมูล"); } return new HttpSuccess(record); } @Post() public async newProfileAbility( @Request() req: RequestWithUser, @Body() body: CreateProfileAbility, ) { if (!body.profileId) { throw new HttpError(HttpStatus.BAD_REQUEST, "กรุณากรอก profileId"); } const profile = await this.profileRepo.findOneBy({ id: body.profileId }); if (!profile) { throw new HttpError(HttpStatus.BAD_REQUEST, "ไม่พบ profile ดังกล่าว"); } await new permission().PermissionOrgUserUpdate(req, "SYS_REGISTRY_OFFICER", profile.id); const data = new ProfileAbility(); const meta = { createdUserId: req.user.sub, createdFullName: req.user.name, lastUpdateUserId: req.user.sub, lastUpdateFullName: req.user.name, createdAt: new Date(), lastUpdatedAt: new Date(), }; Object.assign(data, { ...body, ...meta }); const history = new ProfileAbilityHistory(); Object.assign(history, { ...data, id: undefined }); await this.profileAbilityRepo.save(data); history.profileAbilityId = data.id; await this.profileAbilityHistoryRepo.save(history); return new HttpSuccess(); } @Patch("{abilityId}") public async editProfileAbility( @Body() body: UpdateProfileAbility, @Request() req: RequestWithUser, @Path() abilityId: string, ) { const record = await this.profileAbilityRepo.findOneBy({ id: abilityId }); if (!record) throw new HttpError(HttpStatus.NOT_FOUND, "ไม่พบข้อมูล"); await new permission().PermissionOrgUserUpdate(req, "SYS_REGISTRY_OFFICER", record.profileId); const history = new ProfileAbilityHistory(); Object.assign(record, body); Object.assign(history, { ...record, id: undefined }); history.profileAbilityId = abilityId; record.lastUpdateUserId = req.user.sub; record.lastUpdateFullName = req.user.name; record.lastUpdatedAt = new Date(); history.lastUpdateUserId = req.user.sub; history.lastUpdateFullName = req.user.name; history.createdUserId = req.user.sub; history.createdFullName = req.user.name; history.createdAt = new Date(); history.lastUpdatedAt = new Date(); await Promise.all([ this.profileAbilityRepo.save(record), this.profileAbilityHistoryRepo.save(history), ]); return new HttpSuccess(); } @Delete("{abilityId}") public async deleteProfileAbility(@Path() abilityId: string, @Request() req: RequestWithUser) { const _record = await this.profileAbilityRepo.findOneBy({ id: abilityId }); if (_record) { await new permission().PermissionOrgUserDelete( req, "SYS_REGISTRY_OFFICER", _record.profileId, ); } await this.profileAbilityHistoryRepo.delete({ profileAbilityId: abilityId, }); const result = await this.profileAbilityRepo.delete({ id: abilityId }); if (result.affected == undefined || result.affected <= 0) throw new HttpError(HttpStatus.NOT_FOUND, "ไม่พบข้อมูล"); return new HttpSuccess(); } }