akhilmeka/permit-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: check for client match on GET endpoint of permits and processed

Browse Source
This commit is contained in:
Akhil Meka
2025-11-08 10:22:41 +05:30
parent 0fa88bea70
commit 894343db5a
4 changed files with 21 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/permit/permit.service.ts
View File

@@ -91,15 +91,20 @@ export async function createPermit(
}
}
export async function getPermit(permitId: string, tenantId: string) {
return await permitModel
export async function getPermit(permitId: string, user: AuthenticatedUser) {
const permit = await permitModel
.findOne({
$and: [{ tenantId: tenantId }, { pid: permitId }],
$and: [{ tenantId: user.tenantId }, { pid: permitId }],
})
//.populate({ path: "county", select: "pid name avatar" })
//.populate({ path: "client", select: "pid name avatar" })
.populate({ path: "assignedTo", select: "pid name avatar" })
.populate({ path: "createdBy", select: "pid name avatar" });
if (permit && user.role == "client" && user.orgId != permit.client.toString())
return null;
return permit;
}
export async function listPermits(