From 9562ce7b40deebc7d9ce3b0b6c2dcff98136f37d Mon Sep 17 00:00:00 2001
From: randy-ar <randyabdulrahman87@gmail.com>
Date: Fri, 2 Jan 2026 15:11:06 +0700
Subject: [PATCH 1/4] fix(FE): remove bypass permission in marketing detail and
 form page

---
 .../marketing/detail/MarketingDetail.tsx      | 72 +++----------------
 .../pages/marketing/form/MarketingForm.tsx    | 19 +----
 .../sales-order/SalesOrderProductForm.tsx     |  5 +-
 .../table-view/DeliveryOrderProductTable.tsx  | 60 ----------------
 4 files changed, 13 insertions(+), 143 deletions(-)

diff --git a/src/components/pages/marketing/detail/MarketingDetail.tsx b/src/components/pages/marketing/detail/MarketingDetail.tsx
index 4c9f1a34..677ea422 100644
--- a/src/components/pages/marketing/detail/MarketingDetail.tsx
+++ b/src/components/pages/marketing/detail/MarketingDetail.tsx
@@ -77,10 +77,6 @@ const MarketingDetail = ({
     confirmationModal.openModal();
   };
 
-  const deliveryClickHandler = () => {
-    deliveryModal.openModal();
-  };
-
   const deleteClickHandler = () => {
     deleteModal.openModal();
   };
@@ -135,7 +131,7 @@ const MarketingDetail = ({
         <div className='flex-row flex gap-3'>
           {initialValues?.latest_approval?.step_number == 1 && (
             <>
-              {/* <RequirePermission permissions='lti.marketing.sales_order.approve'>
+              <RequirePermission permissions='lti.marketing.sales_order.approve'>
                 <Button
                   color='success'
                   onClick={approveClickHandler}
@@ -147,20 +143,9 @@ const MarketingDetail = ({
                   <Icon icon='mdi:check' width={24} height={24} />
                   Approve
                 </Button>
-              </RequirePermission> */}
-              <Button
-                color='success'
-                onClick={approveClickHandler}
-                disabled={
-                  initialValues?.latest_approval?.step_number == 1 &&
-                  initialValues?.latest_approval?.action == 'REJECTED'
-                }
-              >
-                <Icon icon='mdi:check' width={24} height={24} />
-                Approve
-              </Button>
+              </RequirePermission>
 
-              {/* <RequirePermission permissions='lti.marketing.sales_order.approve'>
+              <RequirePermission permissions='lti.marketing.sales_order.approve'>
                 <Button
                   color='error'
                   onClick={rejectClickHandler}
@@ -172,23 +157,12 @@ const MarketingDetail = ({
                   <Icon icon='mdi:close' width={24} height={24} />
                   Reject
                 </Button>
-              </RequirePermission> */}
-              <Button
-                color='error'
-                onClick={rejectClickHandler}
-                disabled={
-                  initialValues?.latest_approval?.step_number == 1 &&
-                  initialValues?.latest_approval?.action == 'REJECTED'
-                }
-              >
-                <Icon icon='mdi:close' width={24} height={24} />
-                Reject
-              </Button>
+              </RequirePermission>
             </>
           )}
           {initialValues?.latest_approval?.step_number != 1 && (
             <>
-              {/* <RequirePermission
+              <RequirePermission
                 permissions={
                   initialValues?.latest_approval?.step_number == 3
                     ? 'lti.marketing.delivery_order.update'
@@ -209,21 +183,7 @@ const MarketingDetail = ({
                     : 'Tambah '}
                   Delivery Order
                 </Button>
-              </RequirePermission> */}
-              <Button
-                color='success'
-                href={
-                  initialValues?.latest_approval?.step_number == 3
-                    ? `/marketing/detail/delivery-orders/edit?marketingId=${initialValues?.id}`
-                    : `/marketing/add/delivery-orders?marketingId=${initialValues?.id}`
-                }
-              >
-                <Icon icon='mdi:truck' width={24} height={24} />
-                {initialValues?.latest_approval?.step_number == 3
-                  ? 'Edit '
-                  : 'Tambah '}
-                Delivery Order
-              </Button>
+              </RequirePermission>
             </>
           )}
         </div>
@@ -466,7 +426,7 @@ const MarketingDetail = ({
         <div className='flex flex-row gap-3'>
           {initialValues?.latest_approval?.step_number != 3 && (
             <>
-              {/* <RequirePermission permissions='lti.marketing.sales_order.update'>
+              <RequirePermission permissions='lti.marketing.sales_order.update'>
                 <Button
                   color='warning'
                   type='button'
@@ -475,27 +435,15 @@ const MarketingDetail = ({
                   <Icon icon='mdi:pencil' width={24} height={24} />
                   Edit
                 </Button>
-              </RequirePermission> */}
-              <Button
-                color='warning'
-                type='button'
-                href={`/marketing/detail/${initialValues?.latest_approval?.step_number == 3 ? 'delivery-orders' : 'sales-orders'}/edit?marketingId=${initialValues?.id}`}
-              >
-                <Icon icon='mdi:pencil' width={24} height={24} />
-                Edit
-              </Button>
+              </RequirePermission>
             </>
           )}
-          {/* <RequirePermission permissions='lti.marketing.sales_order.delete'>
+          <RequirePermission permissions='lti.marketing.sales_order.delete'>
             <Button color='error' onClick={deleteClickHandler}>
               <Icon icon='mdi:delete' width={24} height={24} />
               Hapus
             </Button>
-          </RequirePermission> */}
-          <Button color='error' onClick={deleteClickHandler}>
-            <Icon icon='mdi:delete' width={24} height={24} />
-            Hapus
-          </Button>
+          </RequirePermission>
         </div>
       </div>
       <ConfirmationModal
diff --git a/src/components/pages/marketing/form/MarketingForm.tsx b/src/components/pages/marketing/form/MarketingForm.tsx
index ccbba2b5..1c5322e1 100644
--- a/src/components/pages/marketing/form/MarketingForm.tsx
+++ b/src/components/pages/marketing/form/MarketingForm.tsx
@@ -635,12 +635,6 @@ const MarketingForm = ({
                 wrapper: 'bg-white w-full',
               }}
             >
-              {/* <div className='text-blue-500'>
-                {JSON.stringify(formik.values)}
-              </div>
-              <div className='text-red-500'>
-                {JSON.stringify(formik.errors)}
-              </div> */}
               <MemoizedDeliveryOrderProductTable
                 formType={formType}
                 data={deliveryOrderValues}
@@ -690,7 +684,7 @@ const MarketingForm = ({
       {/* Actions button */}
       {formType == 'edit' && (
         <div className='flex flex-row justify-start'>
-          {/* <RequirePermission permissions='lti.marketing.sales_order.delete'>
+          <RequirePermission permissions='lti.marketing.sales_order.delete'>
             <Button
               type='button'
               color='error'
@@ -700,16 +694,7 @@ const MarketingForm = ({
               <Icon icon='mdi:trash' width={24} height={24} />
               Hapus
             </Button>
-          </RequirePermission> */}
-          <Button
-            type='button'
-            color='error'
-            onClick={handleDelete}
-            isLoading={isLoading}
-          >
-            <Icon icon='mdi:trash' width={24} height={24} />
-            Hapus
-          </Button>
+          </RequirePermission>
         </div>
       )}
 
diff --git a/src/components/pages/marketing/form/repeater/sales-order/SalesOrderProductForm.tsx b/src/components/pages/marketing/form/repeater/sales-order/SalesOrderProductForm.tsx
index 75aa3ba6..aa9dd9e8 100644
--- a/src/components/pages/marketing/form/repeater/sales-order/SalesOrderProductForm.tsx
+++ b/src/components/pages/marketing/form/repeater/sales-order/SalesOrderProductForm.tsx
@@ -11,7 +11,7 @@ import SelectInput, {
   useSelect,
 } from '@/components/input/SelectInput';
 import { Kandang } from '@/types/api/master-data/kandang';
-import { KandangApi, WarehouseApi } from '@/services/api/master-data';
+import { WarehouseApi } from '@/services/api/master-data';
 import { ProductWarehouse } from '@/types/api/inventory/product-warehouse';
 import { ProductWarehouseApi } from '@/services/api/inventory';
 import NumberInput from '@/components/input/NumberInput';
@@ -180,9 +180,6 @@ const SalesOrderProductForm = ({
             </Alert>
           </div>
         )}
-        {/* <small className='block text-rose-500'>
-          {JSON.stringify(formik.errors)}
-        </small> */}
         <div className='grid sm:grid-cols-2 gap-4 z-200'>
           <PatternInput
             name='vehicle_number'
diff --git a/src/components/pages/marketing/form/table-view/DeliveryOrderProductTable.tsx b/src/components/pages/marketing/form/table-view/DeliveryOrderProductTable.tsx
index c67b1a3c..ac59529e 100644
--- a/src/components/pages/marketing/form/table-view/DeliveryOrderProductTable.tsx
+++ b/src/components/pages/marketing/form/table-view/DeliveryOrderProductTable.tsx
@@ -32,38 +32,6 @@ const DeliveryOrderProductTable = ({
 
   const columns = useMemo(() => {
     const cols = [
-      // {
-      //   id: 'select',
-      //   header: ({
-      //     table,
-      //   }: {
-      //     table: TanStack.Table<DeliveryOrderProductFormValues>;
-      //   }) => (
-      //     <div className='w-full flex flex-row justify-center'>
-      //       <CheckboxInput
-      //         name='allRow'
-      //         checked={table.getIsAllRowsSelected()}
-      //         indeterminate={table.getIsSomeRowsSelected()}
-      //         onChange={table.getToggleAllRowsSelectedHandler()}
-      //       />
-      //     </div>
-      //   ),
-      //   cell: ({
-      //     row,
-      //   }: {
-      //     row: TanStack.Row<DeliveryOrderProductFormValues>;
-      //   }) => (
-      //     <div>
-      //       <CheckboxInput
-      //         name='row'
-      //         checked={row.getIsSelected()}
-      //         disabled={!row.getCanSelect()}
-      //         indeterminate={row.getIsSomeSelected()}
-      //         onChange={row.getToggleSelectedHandler()}
-      //       />
-      //     </div>
-      //   ),
-      // },
       {
         accessorFn: (row: DeliveryOrderProductFormValues) => row.do_number,
         header: 'No. Pengiriman',
@@ -188,18 +156,6 @@ const DeliveryOrderProductTable = ({
                 </Button>
               )}
               {!props.row.original.qty && '-'}
-              {/* {formType == 'add_deliver' && (
-                <Button
-                  color='error'
-                  className='p-1'
-                  onClick={() =>
-                    onDeleteRef.current(props.row.original.id as number)
-                  }
-                  type='button'
-                >
-                  <Icon icon='mdi:trash' width={16} height={16} />
-                </Button>
-              )} */}
             </>
           </div>
         ),
@@ -248,22 +204,6 @@ const DeliveryOrderProductTable = ({
           <Icon icon='mdi:plus' width={16} height={16} />
           Tambah Pengiriman
         </Button>
-        {/* {selectedRowIds.length > 0 && (
-          <Button
-            type='button'
-            variant='outline'
-            color='error'
-            className='justify-start w-fit py-1 text-sm'
-            onClick={onBulkDelete}
-          >
-            <Icon icon='mdi:trash' width={16} height={16} />
-            Hapus
-            {selectedRowIds.length > 0
-              ? ` (${selectedRowIds.length})`
-              : ''}{' '}
-            Pengiriman
-          </Button>
-        )} */}
       </div>
     </>
   );

From 203782c25836437e0226ed708550e8aff9d39ed6 Mon Sep 17 00:00:00 2001
From: randy-ar <randyabdulrahman87@gmail.com>
Date: Mon, 5 Jan 2026 13:05:10 +0700
Subject: [PATCH 2/4] fix(FE): adjust permission finance

---
 src/components/pages/finance/FinanceDetail.tsx |  2 +-
 src/components/pages/finance/FinanceTable.tsx  | 11 +++++++++--
 src/config/route-permission.ts                 |  9 +++++++--
 3 files changed, 17 insertions(+), 5 deletions(-)

diff --git a/src/components/pages/finance/FinanceDetail.tsx b/src/components/pages/finance/FinanceDetail.tsx
index c7057efa..7f24178f 100644
--- a/src/components/pages/finance/FinanceDetail.tsx
+++ b/src/components/pages/finance/FinanceDetail.tsx
@@ -162,7 +162,7 @@ const FinanceDetail = ({ finance }: { finance: Finance }) => {
             </Button>
           </RequirePermission>
         )}
-        <RequirePermission permissions='lti.finance.transaction.delete'>
+        <RequirePermission permissions='lti.finance.transactions.delete'>
           <Button
             color='error'
             className='min-w-24'
diff --git a/src/components/pages/finance/FinanceTable.tsx b/src/components/pages/finance/FinanceTable.tsx
index 71ed6c84..2d43d273 100644
--- a/src/components/pages/finance/FinanceTable.tsx
+++ b/src/components/pages/finance/FinanceTable.tsx
@@ -49,7 +49,14 @@ const RowOptionsMenu = ({
 }) => {
   return (
     <RowOptionsMenuWrapper type={type}>
-      <RequirePermission permissions='lti.finance.transaction.detail'>
+      <RequirePermission
+        permissions={[
+          'lti.finance.transactions.detail',
+          'lti.finance.initial_balances.detail',
+          'lti.finance.injections.detail',
+          'lti.finance.payments.detail',
+        ]}
+      >
         <Button
           href={`/finance/detail?financeId=${props.row.original.id}`}
           variant='ghost'
@@ -109,7 +116,7 @@ const RowOptionsMenu = ({
         </RequirePermission>
       )}
 
-      <RequirePermission permissions='lti.finance.transaction.delete'>
+      <RequirePermission permissions='lti.finance.transactions.delete'>
         <Button
           onClick={deleteClickHandler}
           variant='ghost'
diff --git a/src/config/route-permission.ts b/src/config/route-permission.ts
index 101dbb6d..2f3e36d3 100644
--- a/src/config/route-permission.ts
+++ b/src/config/route-permission.ts
@@ -75,8 +75,13 @@ export const ROUTE_PERMISSIONS: Record<string, string[]> = {
   '/expense/realization/edit/': ['lti.expense.update.realization'],
 
   // Finance
-  '/finance/': ['lti.finance.transaction.list'],
-  '/finance/detail/': ['lti.finance.transaction.detail'],
+  '/finance/': ['lti.finance.transactions.list'],
+  '/finance/detail/': [
+    'lti.finance.transactions.detail',
+    'lti.finance.initial_balances.detail',
+    'lti.finance.injections.detail',
+    'lti.finance.payments.detail',
+  ],
   '/finance/add/': ['lti.finance.payments.create'],
   '/finance/detail/edit/': ['lti.finance.payments.update'],
   '/finance/add/initial-balance/': ['lti.finance.initial_balances.create'],

From 79cf777b11977a4f18c80deee00f0372299fbf53 Mon Sep 17 00:00:00 2001
From: randy-ar <randyabdulrahman87@gmail.com>
Date: Mon, 5 Jan 2026 13:11:03 +0700
Subject: [PATCH 3/4] fix(FE): merge with branch development

---
 .gitlab-ci.yml | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 2f4b1587..e02ea8ee 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -138,20 +138,20 @@ build:dev:
   environment:
     name: development
   variables:
-    NEXT_PUBLIC_LTI_URL: "https://dev-lti-erp.mbugroup.id"
-    NEXT_PUBLIC_SSO_LOGIN_URL: "https://dev-auth-erp.mbugroup.id"
-    NEXT_PUBLIC_API_BASE_URL: "https://dev-api-lti.mbugroup.id/api"
-    NEXT_PUBLIC_CLIENT_ID: "Lumbung-Telur-Indonesia"
+    NEXT_PUBLIC_LTI_URL: 'https://dev-lti-erp.mbugroup.id'
+    NEXT_PUBLIC_SSO_LOGIN_URL: 'https://dev-auth-erp.mbugroup.id'
+    NEXT_PUBLIC_API_BASE_URL: 'https://dev-api-lti.mbugroup.id/api'
+    NEXT_PUBLIC_CLIENT_ID: 'Lumbung-Telur-Indonesia'
 
 deploy:dev:
   <<: *deploy_template
-  needs: ["build:dev"]
+  needs: ['build:dev']
   rules:
     - if: '$CI_COMMIT_BRANCH == "development"'
   variables:
-    S3_BUCKET: "dev-lti-erp.mbugroup.id"
-    AWS_REGION: "ap-southeast-3"
-    CLOUDFRONT_DISTRIBUTION_ID: "E1Z8XTA8XF1GIV"
+    S3_BUCKET: 'dev-lti-erp.mbugroup.id'
+    AWS_REGION: 'ap-southeast-3'
+    CLOUDFRONT_DISTRIBUTION_ID: 'E1Z8XTA8XF1GIV'
   environment:
     name: development
     url: https://dev-lti-erp.mbugroup.id
@@ -166,20 +166,20 @@ build:staging:
   environment:
     name: staging
   variables:
-    NEXT_PUBLIC_LTI_URL: "https://stg-lti-erp.mbugroup.id"
-    NEXT_PUBLIC_SSO_LOGIN_URL: "https://stg-auth-erp.mbugroup.id"
-    NEXT_PUBLIC_API_BASE_URL: "https://stg-api-lti.mbugroup.id/api"
-    NEXT_PUBLIC_CLIENT_ID: "Lumbung-Telur-Indonesia"
+    NEXT_PUBLIC_LTI_URL: 'https://stg-lti-erp.mbugroup.id'
+    NEXT_PUBLIC_SSO_LOGIN_URL: 'https://stg-auth-erp.mbugroup.id'
+    NEXT_PUBLIC_API_BASE_URL: 'https://stg-api-lti.mbugroup.id/api'
+    NEXT_PUBLIC_CLIENT_ID: 'Lumbung-Telur-Indonesia'
 
 deploy:staging:
   <<: *deploy_template
-  needs: ["build:staging"]
+  needs: ['build:staging']
   rules:
     - if: '$CI_COMMIT_BRANCH == "staging"'
   variables:
-    S3_BUCKET: "stg-lti-erp.mbugroup.id"
-    AWS_REGION: "ap-southeast-3"
-    CLOUDFRONT_DISTRIBUTION_ID: "E2V6PPO1AUIU7H"
+    S3_BUCKET: 'stg-lti-erp.mbugroup.id'
+    AWS_REGION: 'ap-southeast-3'
+    CLOUDFRONT_DISTRIBUTION_ID: 'E2V6PPO1AUIU7H'
   environment:
     name: staging
-    url: https://stg-lti-erp.mbugroup.id
\ No newline at end of file
+    url: https://stg-lti-erp.mbugroup.id

From 11f9a685a81c14bae26218ca40e93f660263adf1 Mon Sep 17 00:00:00 2001
From: randy-ar <randyabdulrahman87@gmail.com>
Date: Mon, 5 Jan 2026 13:42:01 +0700
Subject: [PATCH 4/4] fix(FE): permission for balance injection in finance
 detail page

---
 .../pages/finance/FinanceDetail.tsx           | 28 +++++++++++++++++--
 1 file changed, 25 insertions(+), 3 deletions(-)

diff --git a/src/components/pages/finance/FinanceDetail.tsx b/src/components/pages/finance/FinanceDetail.tsx
index 7f24178f..03291420 100644
--- a/src/components/pages/finance/FinanceDetail.tsx
+++ b/src/components/pages/finance/FinanceDetail.tsx
@@ -9,6 +9,7 @@ import Table from '@/components/Table';
 import {
   FINANCE_INITIAL_BALANCE_STATUS,
   FINANCE_TRANSACTION_STATUS,
+  FINANCE_INJECTION_STATUS,
 } from '@/config/constant';
 import { formatCurrency, formatDate, formatTitleCase } from '@/lib/helper';
 import { FinanceApi } from '@/services/api/finance';
@@ -33,7 +34,7 @@ const FinanceDetail = ({ finance }: { finance: Finance }) => {
     },
     {
       label: 'Pihak',
-      value: finance.party.name,
+      value: finance.party.id ? finance.party.name : '-',
     },
     {
       label: 'Tanggal',
@@ -51,7 +52,7 @@ const FinanceDetail = ({ finance }: { finance: Finance }) => {
   const informasiTransfer = [
     {
       label: 'No. Referensi',
-      value: finance.reference_number,
+      value: finance.reference_number ?? '-',
     },
     {
       label: 'Nomor Rekening',
@@ -69,7 +70,16 @@ const FinanceDetail = ({ finance }: { finance: Finance }) => {
       label: 'Sisa',
       value: formatCurrency(finance.income_amount),
     },
-  ];
+  ].filter((item) => {
+    // Hide party account number row if transaction type is INJECTION
+    if (
+      FINANCE_INJECTION_STATUS.includes(finance.transaction_type) &&
+      item.label === `Rekening ${formatTitleCase(finance.party.type)}`
+    ) {
+      return false;
+    }
+    return true;
+  });
 
   const confirmationModalDeleteClickHandler = async () => {
     setIsDeleteLoading(true);
@@ -162,6 +172,18 @@ const FinanceDetail = ({ finance }: { finance: Finance }) => {
             </Button>
           </RequirePermission>
         )}
+        {FINANCE_INJECTION_STATUS.includes(finance.transaction_type) && (
+          <RequirePermission permissions='lti.finance.injections.update'>
+            <Button
+              color='warning'
+              className='min-w-24'
+              href={`/finance/detail/edit/injection?financeId=${finance.id}`}
+            >
+              <Icon icon='mdi:pencil-outline' />
+              Edit
+            </Button>
+          </RequirePermission>
+        )}
         <RequirePermission permissions='lti.finance.transactions.delete'>
           <Button
             color='error'