danak/dsc-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: the whole role and permission flow

Browse Source
This commit is contained in:
mahyargdz
2025-02-17 13:54:34 +03:30
parent ad673613d9
commit 763b6b49d9
42 changed files with 479 additions and 387 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/modules/users/users.controller.ts
+54 -43
View File
@@ -2,15 +2,18 @@ import { Body, Controller, Get, HttpCode, HttpStatus, Patch, Post, Query } from
import { ApiOperation, ApiTags } from "@nestjs/swagger";
import { CheckValidityDTO } from "./DTO/check-validity.dto";
import { SearchAdminsDto } from "./DTO/search-admins.dto";
import { CreateAdminDto } from "./DTO/create-admin.dto";
import { CreateRoleDto } from "./DTO/create-role.dto";
import { SearchAdminQueryDto } from "./DTO/search-admins-query.dto";
import { SearchCustomersDto } from "./DTO/search-customers.dto";
import { SearchRolesQueryDto } from "./DTO/search-roles.dto";
import { UpdateProfileDto } from "./DTO/update-profile.dto";
import { CreateUserGroupDto } from "./DTO/user-group.dto";
import { User } from "./entities/user.entity";
import { RoleEnum } from "./enums/role.enum";
import { PermissionEnum } from "./enums/permission.enum";
import { UsersService } from "./providers/users.service";
import { AuthGuards } from "../../common/decorators/auth-guard.decorator";
import { Roles } from "../../common/decorators/roles.decorator";
import { PermissionsDec } from "../../common/decorators/permission.decorator";
import { UserDec } from "../../common/decorators/user.decorator";
@Controller("users")
@@ -49,9 +52,8 @@ export class UsersController {
/************************************************************ */
@AuthGuards()
@Roles(RoleEnum.ADMIN)
@ApiOperation({ summary: "Create user group" })
@HttpCode(HttpStatus.CREATED)
@ApiOperation({ summary: "Create user group ==> admin route" })
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@Post("user-group")
createUserGroup(@Body() createDto: CreateUserGroupDto) {
return this.usersService.createUserGroup(createDto);
@@ -59,9 +61,9 @@ export class UsersController {
/************************************************************ */
@ApiOperation({ summary: "get all user group" })
@ApiOperation({ summary: "get all user group ==> admin route" })
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@AuthGuards()
@Roles(RoleEnum.ADMIN)
@Get("user-group")
UserGroups() {
return this.usersService.getUserGroups();
@@ -69,50 +71,59 @@ export class UsersController {
/************************************************************ */
@ApiOperation({ summary: "get all admins" })
@ApiOperation({ summary: "get all users ==> admin route" })
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@AuthGuards()
@Roles(RoleEnum.ADMIN)
@Get("admins")
Users(@Query() queryDto: SearchAdminsDto) {
return this.usersService.findAllAdmins(queryDto);
@Get()
Users() {
return this.usersService.findAllUsers();
}
/************************************************************ */
@ApiOperation({ summary: "get all customers" })
@ApiOperation({ summary: "get all customers ==> admin route" })
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@AuthGuards()
@Roles(RoleEnum.ADMIN)
@Get("customers")
customers(@Query() queryDto: SearchCustomersDto) {
return this.usersService.findAllCustomers(queryDto);
}
/************************************************************ */
// @AuthGuards()
// @ApiOperation({ summary: "Create user financial" })
// @HttpCode(HttpStatus.CREATED)
// @Post("user-financial")
// createUserFinancial(@Body() createDto: CreateFinancialDto, @UserDec() user: User) {
// return this.usersService.createUserFinancial(createDto, user);
// }
/************************************************************ */
// @AuthGuards()
// @ApiOperation({ summary: "update user financial" })
// @HttpCode(HttpStatus.CREATED)
// @Patch("user-financial/:id/update")
// updateUserFinancial(@Body() updateDto: CreateFinancialDto, @UserDec() user: User, @Param() paramDto: ParamDto) {
// return this.usersService.updateUserFinancial(updateDto, user, paramDto.id);
// }
/************************************************************ */
@ApiOperation({ summary: "get all user financials" })
@ApiOperation({ summary: "get all admins ==> admin route" })
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@AuthGuards()
@Get("user-financials")
userFinancials(@UserDec("id") userId: string) {
return this.usersService.getUserFinancial(userId);
@Get("admins")
getAdmins(@Query() queryDto: SearchAdminQueryDto) {
return this.usersService.getAdmins(queryDto);
}
@ApiOperation({ summary: "create admin ==> admin route" })
@AuthGuards()
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@Post("admins")
createAdmin(@Body() createDto: CreateAdminDto) {
return this.usersService.createAdmin(createDto);
}
@ApiOperation({ summary: "get all permissions ==> admin route" })
@AuthGuards()
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@Get("permissions")
getPermissions() {
return this.usersService.getPermissions();
}
@ApiOperation({ summary: "get all roles ==> admin route" })
@AuthGuards()
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@Get("roles")
getRoles(@Query() queryDto: SearchRolesQueryDto) {
return this.usersService.getRoles(queryDto);
}
@ApiOperation({ summary: "create role ==> admin route" })
@AuthGuards()
@PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
@Post("roles")
createRole(@Body() createDto: CreateRoleDto) {
return this.usersService.createRole(createDto);
}
}