Jepp9350
d28cb172a0
This update introduces explicit permission definitions for various route handlers across multiple routes. These changes enhance clarity and allow for more granular control over route access based on defined permissions. The updates ensure better manageability and scalability of endpoint permissions.
88 lines
3.6 KiB
PHP
88 lines
3.6 KiB
PHP
<?php
|
|
|
|
namespace routes;
|
|
|
|
use classes\authentication;
|
|
use objects\logs_o;
|
|
use objects\users_o;
|
|
use traits\route_t;
|
|
|
|
class customerCodeDepartmentRoute
|
|
{
|
|
use route_t;
|
|
|
|
public function run(): void
|
|
{
|
|
$this->get('/admin/customer/code', function () {
|
|
// Require the user to be logged in
|
|
global $response;
|
|
$this->requirePermission('get_customer_code');
|
|
// Get the user object
|
|
$user = (new authentication())->get_user();
|
|
// Check if the request was successful
|
|
if ($user) {
|
|
// Get the query parameters from the URL
|
|
$data = $_GET;
|
|
// Check if the required fields are set
|
|
if (!isset($data['customer_number']) && !isset($data['user_id'])) {
|
|
$response->error('User ID or Customer Number is required', 400);
|
|
}
|
|
// Log the incident
|
|
(new logs_o())->add('customer_codes', 'global', 1, $user->id, 'GET_CUSTOMER_CODE', 'Successfully retrieved customer code');
|
|
// Check if the user exists
|
|
if (!(new users_o())->automaticGetTargetUserFromRequest()->exists()) {
|
|
$response->error('Customer not found', 400);
|
|
}
|
|
// Return the customer code
|
|
$response->success(
|
|
['code' => (new users_o())->automaticGetTargetUserFromRequest()->getCode()]
|
|
);
|
|
} else {
|
|
// Log the incident
|
|
(new logs_o())->add('customer_codes', 'global', 1, 0, 'GET_CUSTOMER_CODE', 'No user found, or invalid session');
|
|
// Return an error
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
},
|
|
[
|
|
'get_customer_code' => 'Get customer code'
|
|
]
|
|
);
|
|
|
|
$this->post('/admin/customer/code', function () {
|
|
// Require the user to be logged in
|
|
global $response;
|
|
$this->requirePermission('add_customer_code');
|
|
// Get the user object
|
|
$user = (new authentication())->get_user();
|
|
// Check if the request was successful
|
|
if ($user) {
|
|
// Get the post data
|
|
$data = json_decode(file_get_contents('php://input'), true);
|
|
// Check if the required fields are set
|
|
if (!isset($data['customer_number']) && !isset($data['user_id']) && !isset($data['code'])) {
|
|
$response->error('User ID, Customer Number, and Code are required', 400);
|
|
}
|
|
// Log the incident
|
|
(new logs_o())->add('customer_codes', 'global', 1, $user->id, 'ADD_CUSTOMER_CODE', 'Successfully added customer code');
|
|
// Check if the user exists
|
|
if (!(new users_o())->automaticGetTargetUserFromRequest()->exists()) {
|
|
$response->error('Customer not found', 400);
|
|
}
|
|
// Add the customer code
|
|
(new users_o())->automaticGetTargetUserFromRequest()->setCode($data['code']);
|
|
// Return a success message
|
|
$response->success(['message' => 'Customer code added']);
|
|
} else {
|
|
// Log the incident
|
|
(new logs_o())->add('customer_codes', 'global', 1, 0, 'ADD_CUSTOMER_CODE', 'No user found, or invalid session');
|
|
// Return an error
|
|
$response->error('Invalid session', 400);
|
|
}
|
|
},
|
|
[
|
|
'add_customer_code' => 'Add a customer code'
|
|
]
|
|
);
|
|
}
|
|
} |