120 lines
3.9 KiB
Python
120 lines
3.9 KiB
Python
from typing import Any, Dict
|
|
|
|
from core.database import get_core_db
|
|
from core.security import get_current_user, validate_access_to_resource
|
|
from fastapi import APIRouter, Depends, HTTPException, Query
|
|
from sqlalchemy.orm import Session
|
|
from sqlalchemy import or_
|
|
|
|
from .dto import ContainerDTO
|
|
from .models import Container
|
|
|
|
router = APIRouter(prefix="/containers")
|
|
|
|
|
|
@router.get("/", response_model=Dict[str, Any])
|
|
async def list_containers(
|
|
page: int = Query(1, ge=1, description="Número de página"),
|
|
page_size: int = Query(50, ge=1, le=100, description="Tamaño de página"),
|
|
<<<<<<< HEAD
|
|
company_id: int = Query(..., description="ID de la empresa"),
|
|
=======
|
|
search: str = Query(None, description="Término de búsqueda"),
|
|
>>>>>>> 88ab6b45df947b2091e7cd5fff7468284a0ceef6
|
|
db: Session = Depends(get_core_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
# 🛡️ Permiso de Lectura (Listado)
|
|
validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.view"])
|
|
|
|
skip = (page - 1) * page_size
|
|
query = db.query(Container)
|
|
|
|
if search:
|
|
search_filter = f"%{search}%"
|
|
query = query.filter(
|
|
or_(
|
|
Container.key.ilike(search_filter),
|
|
Container.description.ilike(search_filter)
|
|
)
|
|
)
|
|
items = query.offset(skip).limit(page_size).all()
|
|
total = query.count()
|
|
return {
|
|
"items": [ContainerDTO.model_validate(obj) for obj in items],
|
|
"total": total,
|
|
"page": page,
|
|
"page_size": page_size,
|
|
}
|
|
|
|
|
|
@router.get("/{key}", response_model=ContainerDTO)
|
|
async def get_container(
|
|
key: str,
|
|
company_id: int = Query(..., description="ID de la empresa"),
|
|
db: Session = Depends(get_core_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
# 🛡️ Permiso de Lectura (Individual)
|
|
validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.view"])
|
|
|
|
obj = db.query(Container).filter(Container.key == key).first()
|
|
if not obj:
|
|
raise HTTPException(status_code=404, detail="Not found")
|
|
return obj
|
|
|
|
|
|
@router.post("/", response_model=ContainerDTO, status_code=201)
|
|
async def create_container(
|
|
data: ContainerDTO,
|
|
company_id: int = Query(..., description="ID de la empresa"),
|
|
db: Session = Depends(get_core_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
# 🛡️ Permiso de Creación
|
|
validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.create"])
|
|
|
|
obj = Container(**data.dict())
|
|
db.add(obj)
|
|
db.commit()
|
|
db.refresh(obj)
|
|
return obj
|
|
|
|
|
|
@router.put("/{key}", response_model=ContainerDTO)
|
|
async def update_container(
|
|
key: str,
|
|
data: ContainerDTO,
|
|
company_id: int = Query(..., description="ID de la empresa"),
|
|
db: Session = Depends(get_core_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
# 🛡️ Permiso de Edición
|
|
validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.edit"])
|
|
|
|
obj = db.query(Container).filter(Container.key == key).first()
|
|
if not obj:
|
|
raise HTTPException(status_code=404, detail="Not found")
|
|
for field, value in data.dict().items():
|
|
setattr(obj, field, value)
|
|
db.commit()
|
|
db.refresh(obj)
|
|
return obj
|
|
|
|
|
|
@router.delete("/{key}", status_code=204)
|
|
async def delete_container(
|
|
key: str,
|
|
company_id: int = Query(..., description="ID de la empresa"),
|
|
db: Session = Depends(get_core_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
# 🛡️ Permiso de Borrado
|
|
validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.delete"])
|
|
|
|
obj = db.query(Container).filter(Container.key == key).first()
|
|
if not obj:
|
|
raise HTTPException(status_code=404, detail="Not found")
|
|
db.delete(obj)
|
|
db.commit()
|
|
return None |