ADUANASOFT/service_manager
10
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Permisos tickets

Browse Source
This commit is contained in:
Alonso
2026-03-18 13:53:33 -06:00
parent 80d41c9487
commit b76fcb1390
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
backend/app/api/v1/endpoints/tickets.py
View File

@@ -285,6 +285,8 @@ async def create_comment(ticket_id: str, comment: CommentCreate, db: AsyncSessio
@router.delete("/{ticket_id}", status_code=status.HTTP_204_NO_CONTENT) @router.delete("/{ticket_id}", status_code=status.HTTP_204_NO_CONTENT)
async def delete_ticket(ticket_id: str, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user)): async def delete_ticket(ticket_id: str, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user)):
"""Eliminar un ticket (solo admin/manager)""" """Eliminar un ticket (solo admin/manager)"""
if current_user.role not in (UserRole.ADMIN, UserRole.SUPPORT_MANAGER):
raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="No tienes permisos para eliminar tickets")
ticket_uuid = validate_uuid_param(ticket_id, "ticket ID") ticket_uuid = validate_uuid_param(ticket_id, "ticket ID")
query = select(Ticket).where(Ticket.id == ticket_uuid, Ticket.tenant_id == current_user.tenant_id) query = select(Ticket).where(Ticket.id == ticket_uuid, Ticket.tenant_id == current_user.tenant_id)
result = await db.execute(query) result = await db.execute(query)