gitea-admin/lti-api
1
0
Fork 0
mirror of https://gitlab.com/mbugroup/lti-api.git synced 2026-05-23 14:55:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat/BE/US-304/TASK-307,306-adjustment middleware check if user have permission,create all permission in modules lti

Browse Source
This commit is contained in:
ragilap
2025-12-10 08:53:09 +07:00
parent e6094528b5
commit 2effa08648
29 changed files with 289 additions and 136 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/modules/marketing/delivery-orderss/route.go
+5 -6
View File
@@ -11,13 +11,12 @@ import (
func DeliveryOrdersRoutes(v1 fiber.Router, u user.UserService, s deliveryOrders.DeliveryOrdersService) {
ctrl := controller.NewDeliveryOrdersController(s)
v1.Get("/", ctrl.GetAll)
v1.Get("/:id", ctrl.GetOne)
v1.Use(m.Auth(u))
v1.Get("/",m.RequirePermissions(m.P_DeliveryGetAll), ctrl.GetAll)
v1.Get("/:id",m.RequirePermissions(m.P_DeliveryGetOne), ctrl.GetOne)
// Sisanya di group /delivery-orders
route := v1.Group("/delivery-orders")
route.Use(m.Auth(u))
// route.Get("/", m.Auth(u), ctrl.GetAll)
// route.Post("/", m.Auth(u), ctrl.CreateOne)
@@ -25,7 +24,7 @@ func DeliveryOrdersRoutes(v1 fiber.Router, u user.UserService, s deliveryOrders.
// route.Patch("/:id", m.Auth(u), ctrl.UpdateOne)
// route.Delete("/:id", m.Auth(u), ctrl.DeleteOne)
route.Post("/", ctrl.CreateOne)
route.Patch("/:id", ctrl.UpdateOne)
route.Post("/",m.RequirePermissions(m.P_DeliveryCreateOne), ctrl.CreateOne)
route.Patch("/:id",m.RequirePermissions(m.P_DeliveryUpdateOne), ctrl.UpdateOne)
}
internal/modules/marketing/sales-orders/route.go
+5 -6
View File
@@ -11,17 +11,16 @@ import (
func SalesOrdersRoutes(v1 fiber.Router, u user.UserService, s salesOrders.SalesOrdersService) {
ctrl := controller.NewSalesOrdersController(s)
v1.Delete("/:id", ctrl.DeleteOne)
v1.Use(m.Auth(u))
v1.Delete("/:id",m.RequirePermissions(m.P_SalesOrderDelete), ctrl.DeleteOne)
route := v1.Group("/sales-orders")
route.Use(m.Auth(u))
// route.Post("/", m.Auth(u), ctrl.CreateOne)
// route.Patch("/:id", m.Auth(u), ctrl.UpdateOne)
// route.Delete("/:id", m.Auth(u), ctrl.DeleteOne)
route.Post("/", ctrl.CreateOne)
route.Patch("/:id", ctrl.UpdateOne)
route.Post("/",m.RequirePermissions(m.P_SalesOrderCreateOne), ctrl.CreateOne)
route.Patch("/:id",m.RequirePermissions(m.P_SalesOrderUpdateOne), ctrl.UpdateOne)
route.Post("/approvals", ctrl.Approval)
route.Post("/approvals",m.RequirePermissions(m.P_SalesOrderApproval), ctrl.Approval)
}