760 lines
31 KiB
C#
760 lines
31 KiB
C#
using System.Linq;
|
|
using System.Threading.Tasks;
|
|
using Microsoft.AspNetCore.Http;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.AspNetCore.Routing;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using Microsoft.Extensions.Logging;
|
|
using AyaNova.Models;
|
|
using AyaNova.Api.ControllerHelpers;
|
|
using AyaNova.Biz;
|
|
|
|
|
|
namespace AyaNova.Api.Controllers
|
|
{
|
|
|
|
[ApiController]
|
|
[ApiVersion("8.0")]
|
|
[Route("api/v{version:apiVersion}/workorders")]
|
|
[Produces("application/json")]
|
|
[Authorize]
|
|
public class WorkOrderController : ControllerBase
|
|
{
|
|
private readonly AyContext ct;
|
|
private readonly ILogger<WorkOrderController> log;
|
|
private readonly ApiServerState serverState;
|
|
|
|
|
|
/// <summary>
|
|
/// ctor
|
|
/// </summary>
|
|
/// <param name="dbcontext"></param>
|
|
/// <param name="logger"></param>
|
|
/// <param name="apiServerState"></param>
|
|
public WorkOrderController(AyContext dbcontext, ILogger<WorkOrderController> logger, ApiServerState apiServerState)
|
|
{
|
|
ct = dbcontext;
|
|
log = logger;
|
|
serverState = apiServerState;
|
|
}
|
|
|
|
|
|
#region WorkOrder top level routes
|
|
|
|
/// <summary>
|
|
/// Create Workorder
|
|
/// </summary>
|
|
/// <param name="newObject"></param>
|
|
/// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
|
|
/// <returns></returns>
|
|
[HttpPost]
|
|
public async Task<IActionResult> PostWorkOrder([FromBody] WorkOrder newObject, ApiVersion apiVersion)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//If a user has change roles
|
|
if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Create and validate
|
|
WorkOrder o = await biz.CreateAsync(newObject);
|
|
if (o == null)
|
|
return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
else
|
|
return CreatedAtAction(nameof(WorkOrderController.GetWorkOrder), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
|
|
|
|
}
|
|
|
|
|
|
|
|
//TODO: CreateFromTemplate(templateid)
|
|
//TODO: Createfromquote(quoteid)
|
|
//todo: createfrompm(pmid)
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Duplicate WorkOrder
|
|
/// </summary>
|
|
/// <param name="id">Create a duplicate of this items id</param>
|
|
/// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
|
|
/// <returns></returns>
|
|
[HttpPost("duplicate/{id}")]
|
|
public async Task<IActionResult> DuplicateWorkOrder([FromRoute] long id, ApiVersion apiVersion)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//If a user has change roles
|
|
if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
// var oSrc = await biz.GetAsync(id, false);
|
|
// if (oSrc == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
//Create and validate
|
|
WorkOrder o = await biz.DuplicateAsync(id);
|
|
if (o == null)
|
|
return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
else
|
|
return CreatedAtAction(nameof(WorkOrderController.GetWorkOrder), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
|
|
|
|
}
|
|
|
|
|
|
/// <summary>
|
|
/// Get full WorkOrder object
|
|
/// </summary>
|
|
/// <param name="id"></param>
|
|
/// <returns>A single WorkOrder</returns>
|
|
[HttpGet("{id}")]
|
|
public async Task<IActionResult> GetWorkOrder([FromRoute] long id)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules
|
|
if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
var o = await biz.GetAsync(id);
|
|
if (o == null)
|
|
return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
// NOTE: HERE would be the second check of biz rules before returning the object
|
|
// in cases where there is also a business rule to affect retrieval on top of basic rights
|
|
|
|
return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
|
|
}
|
|
|
|
//TODO: GET BY RELATIVE
|
|
//get by descendent type and id
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Put (update) WorkOrder
|
|
/// </summary>
|
|
/// <param name="id"></param>
|
|
/// <param name="updatedObject"></param>
|
|
/// <returns></returns>
|
|
[HttpPut("{id}")]
|
|
public async Task<IActionResult> PutWorkOrder([FromRoute] long id, [FromBody] WorkOrder updatedObject)
|
|
{
|
|
return StatusCode(501);
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
//todo: handle concurrency in biz object, what to do?
|
|
|
|
// var o = await biz.PutAsync(id, updatedObject);
|
|
// try
|
|
// {
|
|
// if (o == null)
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
// }
|
|
// catch (DbUpdateConcurrencyException)
|
|
// {
|
|
// if (!await biz.ExistsAsync(id))
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
// else
|
|
// return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
|
|
// }
|
|
// return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Delete WorkOrder
|
|
/// </summary>
|
|
/// <param name="id"></param>
|
|
/// <returns>Ok</returns>
|
|
[HttpDelete("{id}")]
|
|
public async Task<IActionResult> DeleteWorkOrder([FromRoute] long id)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
var o = await biz.GetAsync(id, false);
|
|
if (o == null)
|
|
return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!await biz.DeleteAsync(o))
|
|
return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
|
|
return NoContent();
|
|
}
|
|
|
|
#endregion WorkorderTopLevel routes
|
|
|
|
#region WorkOrder Item
|
|
//TODO: Plot exact routes needed here, not all are needed, particularly the collection ones
|
|
//but maybe handy? Like do I need delete on entire woitems collection?
|
|
//WorkOrder/{woid}/WorkorderItems <- all workorderitems, post to add new, put to update all as a collection
|
|
//WorkOrder/{woid}/WorkOrderItems/{woitemid} <- CRUD single woitemid
|
|
//https://docs.microsoft.com/en-us/azure/architecture/best-practices/api-design#define-operations-in-terms-of-http-methods
|
|
/*
|
|
Resource POST GET PUT DELETE
|
|
/customers Create a new customer Retrieve all customers Bulk update of customers Remove all customers
|
|
/customers/1 Error Retrieve the details for customer 1 Update the details of customer 1 if it exists Remove customer 1
|
|
/customers/1/orders Create a new order for customer 1 Retrieve all orders for customer 1 Bulk update of orders for customer 1 Remove all orders for customer 1
|
|
*/
|
|
|
|
//So Post into a collection means create one item in that collection, never a whole collection being created at once
|
|
//GET PUT and DELETE on a collecdtion always mean the entire collection, POST is the outlier here
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Create WorkOrderItem
|
|
/// </summary>
|
|
/// <param name="newObject"></param>
|
|
/// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
|
|
/// <returns></returns>
|
|
[HttpPost("items")]
|
|
public async Task<IActionResult> PostWorkOrderItem([FromBody] WorkOrderItem newObject, ApiVersion apiVersion)
|
|
{
|
|
//NOTE: we don't need the workorder id in the route because the workorder item must contain the workorder id anyway
|
|
|
|
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//If a user has change roles
|
|
if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Create and validate
|
|
WorkOrderItem o = await biz.CreateItemAsync(newObject);
|
|
if (o == null)
|
|
return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
else
|
|
return CreatedAtAction(nameof(WorkOrderController.GetWorkOrderItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Get WorkOrderItem object
|
|
/// </summary>
|
|
/// <param name="WorkOrderItemId"></param>
|
|
/// <returns>A single WorkOrderItem</returns>
|
|
[HttpGet("items/{WorkOrderItemId}")]
|
|
public async Task<IActionResult> GetWorkOrderItem([FromRoute] long WorkOrderItemId)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules
|
|
if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
// var o = await biz.GetAsync(id);
|
|
// if (o == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
// // NOTE: HERE would be the second check of biz rules before returning the object
|
|
// // in cases where there is also a business rule to affect retrieval on top of basic rights
|
|
|
|
// return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Put (update) WorkOrderItem
|
|
/// </summary>
|
|
/// <param name="id"></param>
|
|
/// <param name="updatedObject"></param>
|
|
/// <returns></returns>
|
|
[HttpPut("items/{WorkOrderItemId}")]
|
|
public async Task<IActionResult> PutWorkOrderItem([FromRoute] long id, [FromBody] WorkOrderItem updatedObject)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
var o = await biz.GetAsync(id, false);
|
|
if (o == null)
|
|
return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
// try
|
|
// {
|
|
// if (!await biz.PutAsync(o, updatedObject))
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
// }
|
|
// catch (DbUpdateConcurrencyException)
|
|
// {
|
|
// if (!await biz.ExistsAsync(id))
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
// else
|
|
// return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
|
|
// }
|
|
// return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Delete WorkOrderItem
|
|
/// </summary>
|
|
/// <param name="workOrderItemId"></param>
|
|
/// <returns>Ok-no content</returns>
|
|
[HttpDelete("items/{WorkOrderItemId}")]
|
|
public async Task<IActionResult> DeleteWorkOrderItem([FromRoute] long workOrderItemId)
|
|
{
|
|
//NOTE: we don't need the workorder id in the route because the workorder item must contain the workorder id anyway
|
|
|
|
//WorkOrder/{woid}/WorkorderItems <- all workorderitems, post to add new, put to update all as a collection
|
|
//WorkOrder/{WorkOrderId}/WorkorderItems
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
//*******************************************************************************
|
|
//NOTE: I'm thinking there should be no db access in controller
|
|
//let the biz object return not found if necessary
|
|
//*******************************************************************************
|
|
|
|
// var o = await biz.GetAsync(workOrderId, false);
|
|
// if (o == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
// //Make sure the item exists first before getting into it
|
|
// if (!o.WorkorderItems.Exists(m => m.Id == workOrderItemId))
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
|
|
|
|
//stubbed out for now just to see routes
|
|
// if (!await biz.DeleteItemsAsync(o))
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
|
|
// return NoContent();
|
|
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
#endregion workorderitem
|
|
|
|
#region WorkOrderItemLabor
|
|
|
|
/// <summary>
|
|
/// Create WorkOrderItemLabor
|
|
/// </summary>
|
|
/// <param name="newObject"></param>
|
|
/// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
|
|
/// <returns></returns>
|
|
[HttpPost("items/labors")]
|
|
public async Task<IActionResult> PostWorkOrderItemLabor([FromBody] WorkOrderItemLabor newObject, ApiVersion apiVersion)
|
|
{
|
|
//NOTE: we don't need the workorder id in the route because the workorder item must contain the workorder id anyway
|
|
|
|
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//If a user has change roles
|
|
if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
// //Create and validate
|
|
// WorkOrderItemLabor o = await biz.CreateAsync(newObject);
|
|
// if (o == null)
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
// else
|
|
// return CreatedAtAction(nameof(WorkOrderController.GetWorkOrder), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Get WorkOrderItemLabor object
|
|
/// </summary>
|
|
/// <param name="WorkOrderItemLaborId"></param>
|
|
/// <returns>A single WorkOrderItemLabor</returns>
|
|
[HttpGet("items/labors/{WorkOrderItemLaborId}")]
|
|
public async Task<IActionResult> GetWorkOrderItemLabor([FromRoute] long WorkOrderItemLaborId)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules
|
|
if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
// var o = await biz.GetAsync(id);
|
|
// if (o == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
// // NOTE: HERE would be the second check of biz rules before returning the object
|
|
// // in cases where there is also a business rule to affect retrieval on top of basic rights
|
|
|
|
// return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Put (update) WorkOrderItemLabor
|
|
/// </summary>
|
|
/// <param name="id"></param>
|
|
/// <param name="updatedObject"></param>
|
|
/// <returns></returns>
|
|
[HttpPut("items/labors/{WorkOrderItemLaborId}")]
|
|
public async Task<IActionResult> PutWorkOrderItemLabor([FromRoute] long id, [FromBody] WorkOrderItemLabor updatedObject)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
var o = await biz.GetAsync(id, false);
|
|
if (o == null)
|
|
return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
// try
|
|
// {
|
|
// if (!await biz.PutAsync(o, updatedObject))
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
// }
|
|
// catch (DbUpdateConcurrencyException)
|
|
// {
|
|
// if (!await biz.ExistsAsync(id))
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
// else
|
|
// return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
|
|
// }
|
|
// return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Delete WorkOrderItemLabor
|
|
/// </summary>
|
|
/// <param name="workOrderItemLaborId"></param>
|
|
/// <returns>Ok-no content</returns>
|
|
[HttpDelete("items/labors/{WorkOrderItemLaborId}")]
|
|
public async Task<IActionResult> DeleteWorkOrderItemLabor([FromRoute] long workOrderItemLaborId)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
//*******************************************************************************
|
|
//NOTE: I'm thinking there should be no db access in controller
|
|
//let the biz object return not found if necessary
|
|
//*******************************************************************************
|
|
|
|
|
|
// var o = await biz.GetAsync(workOrderId, false);
|
|
// if (o == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
// //Get WorkorderItem
|
|
// var woitem = o.WorkorderItems.FirstOrDefault(m => m.Id == workOrderItemId);
|
|
// if (woitem == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
// //Get WorkOrderItemLabor
|
|
// var woitemlabor = woitem.WorkorderItemLabors.FirstOrDefault(m => m.Id == workOrderItemLaborId);
|
|
// if (woitem == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
|
|
|
|
|
|
//stubbed out for now just to see routes
|
|
// if (!await biz.DeleteWorkOrderItemLaborAsync(woitemlabor))//may need more info, not sure
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
|
|
//return NoContent();
|
|
|
|
return StatusCode(501);
|
|
}
|
|
#endregion WorkOrderItemLabor
|
|
|
|
#region WorkOrderItemPart
|
|
|
|
|
|
/// <summary>
|
|
/// Create WorkOrderItemPart
|
|
/// </summary>
|
|
/// <param name="newObject"></param>
|
|
/// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
|
|
/// <returns></returns>
|
|
[HttpPost("items/parts")]
|
|
public async Task<IActionResult> PostWorkOrderItemPart([FromBody] WorkOrderItemPart newObject, ApiVersion apiVersion)
|
|
{
|
|
//NOTE: we don't need the workorder id in the route because the workorder item must contain the workorder id anyway
|
|
|
|
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//If a user has change roles
|
|
if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
// //Create and validate
|
|
// WorkOrderItemPart o = await biz.CreateAsync(newObject);
|
|
// if (o == null)
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
// else
|
|
// return CreatedAtAction(nameof(WorkOrderController.GetWorkOrder), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Get WorkOrderItemPart object
|
|
/// </summary>
|
|
/// <param name="WorkOrderItemPartId"></param>
|
|
/// <returns>A single WorkOrderItemPart</returns>
|
|
[HttpGet("items/parts/{WorkOrderItemPartId}")]
|
|
public async Task<IActionResult> GetWorkOrderItemPart([FromRoute] long WorkOrderItemPartId)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
//NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules
|
|
if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
// var o = await biz.GetAsync(id);
|
|
// if (o == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
// // NOTE: HERE would be the second check of biz rules before returning the object
|
|
// // in cases where there is also a business rule to affect retrieval on top of basic rights
|
|
|
|
// return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Put (update) WorkOrderItemPart
|
|
/// </summary>
|
|
/// <param name="id"></param>
|
|
/// <param name="updatedObject"></param>
|
|
/// <returns></returns>
|
|
[HttpPut("items/parts/{WorkOrderItemPartId}")]
|
|
public async Task<IActionResult> PutWorkOrderItemPart([FromRoute] long id, [FromBody] WorkOrderItemPart updatedObject)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
var o = await biz.GetAsync(id, false);
|
|
if (o == null)
|
|
return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
// try
|
|
// {
|
|
// if (!await biz.PutAsync(o, updatedObject))
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
// }
|
|
// catch (DbUpdateConcurrencyException)
|
|
// {
|
|
// if (!await biz.ExistsAsync(id))
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
// else
|
|
// return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
|
|
// }
|
|
// return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
|
|
return StatusCode(501);
|
|
}
|
|
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// Delete WorkOrderItemPart
|
|
/// </summary>
|
|
/// <param name="workOrderItemPartId"></param>
|
|
/// <returns>Ok-no content</returns>
|
|
[HttpDelete("items/parts/{WorkOrderItemPartId}")]
|
|
public async Task<IActionResult> DeleteWorkOrderItemPart([FromRoute] long workOrderItemPartId)
|
|
{
|
|
if (!serverState.IsOpen)
|
|
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
|
|
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(new ApiErrorResponse(ModelState));
|
|
|
|
//Instantiate the business object handler
|
|
WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
|
|
|
|
if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
|
|
return StatusCode(403, new ApiNotAuthorizedResponse());
|
|
|
|
|
|
//*******************************************************************************
|
|
//NOTE: I'm thinking there should be no db access in controller
|
|
//let the biz object return not found if necessary
|
|
//*******************************************************************************
|
|
|
|
// var o = await biz.GetAsync(workOrderId, false);
|
|
// if (o == null)
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
// //Make sure the item exists first before getting into it
|
|
// if (!o.WorkorderItems.Exists(m => m.Id == workOrderItemId))
|
|
// return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
|
|
|
|
|
|
|
|
//stubbed out for now just to see routes
|
|
// if (!await biz.DeleteItemsAsync(o))
|
|
// return BadRequest(new ApiErrorResponse(biz.Errors));
|
|
|
|
//return NoContent();
|
|
|
|
return StatusCode(501);
|
|
}
|
|
#endregion WorkOrderItemPart
|
|
|
|
//------------
|
|
|
|
|
|
}//eoc
|
|
}//eons |