mirror of
https://github.com/Sea-Haven-Industries/shoc-backend.git
synced 2026-09-30 17:43:12 +00:00
Stamp WorkOrder.AccountId on all create paths and filter board/list/search/detail by server-derived account claims so scoped callers cannot cross accounts. Co-authored-by: Cursor <cursoragent@cursor.com>
75 lines
2.6 KiB
C#
75 lines
2.6 KiB
C#
using System.Security.Claims;
|
|
using SeaHaven.DataServices.Helpers;
|
|
using SeaHaven.DataServices.Interfaces;
|
|
using SeaHaven.Services.DTOs;
|
|
using SeaHaven.Services.Helpers;
|
|
using SeaHaven.Services.Interfaces;
|
|
|
|
namespace SeaHaven.Services.Implementation
|
|
{
|
|
public class WorkOrderAdvancedSearchService : IWorkOrderAdvancedSearchService
|
|
{
|
|
private const int DefaultPageSize = 100;
|
|
private const int MaxPageSize = 100;
|
|
|
|
private readonly IWorkOrderAdvancedSearchDataService _searchDataService;
|
|
private readonly IWorkOrderAccountResolver _accountResolver;
|
|
|
|
public WorkOrderAdvancedSearchService(
|
|
IWorkOrderAdvancedSearchDataService searchDataService,
|
|
IWorkOrderAccountResolver accountResolver)
|
|
{
|
|
_searchDataService = searchDataService;
|
|
_accountResolver = accountResolver;
|
|
}
|
|
|
|
public async Task<PagedResult<WorkOrderBoardRowDto>> SearchAsync(
|
|
WorkOrderAdvancedSearchQueryDto query,
|
|
ClaimsPrincipal user,
|
|
string? currentUserId)
|
|
{
|
|
var accountId = _accountResolver.ResolveAccountFilter(user);
|
|
var page = query.Page < 0 ? 0 : query.Page;
|
|
var pageSize = query.PageSize < 1 ? DefaultPageSize : Math.Min(query.PageSize, MaxPageSize);
|
|
|
|
var dateRange = WorkOrderSearchDateRangeResolver.Resolve(
|
|
query.DatePreset,
|
|
query.DateFrom,
|
|
query.DateTo);
|
|
|
|
var sortBy = WorkOrderBoardSortFields.NormalizeOrThrow(query.SortBy);
|
|
|
|
var dataQuery = new WorkOrderAdvancedSearchQuery(
|
|
WorkOrderBoardSearchFilter.NormalizeSearch(query.Search),
|
|
dateRange.From,
|
|
dateRange.To,
|
|
query.Sites,
|
|
query.Types,
|
|
query.Overdue,
|
|
query.Dispatchers,
|
|
query.Statuses,
|
|
query.PmTypes,
|
|
query.VendorIds,
|
|
query.DocStatuses,
|
|
query.MyWorkOrders,
|
|
currentUserId,
|
|
page,
|
|
pageSize,
|
|
sortBy,
|
|
query.SortDir ?? "asc",
|
|
accountId);
|
|
|
|
var result = await _searchDataService.SearchAsync(dataQuery);
|
|
var utcNow = DateTime.UtcNow;
|
|
|
|
return new PagedResult<WorkOrderBoardRowDto>
|
|
{
|
|
Items = result.Rows.Select(r => WorkOrderBoardService.MapRawRow(r, utcNow)).ToList(),
|
|
TotalCount = result.TotalCount,
|
|
Page = page,
|
|
PageSize = pageSize,
|
|
PageBase = 0
|
|
};
|
|
}
|
|
}
|
|
}
|