Mina Choi
c62b66e35b
- 소유권 게이팅(common/authz): 변경 액션 본인∪OWNER, 협력사 삭제 OWNER 전용 - 견적 수동 낙찰(award) + 작성자명(creatorName) 표시 + 전화번호 입력 컴포넌트 + 카드 엑셀 업로드 - supplier_type 은 이번 커밋 미변경(다음 커밋에서 코드부터 정리 예정) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
66 lines
3.0 KiB
Python
66 lines
3.0 KiB
Python
from uuid import UUID
|
|
|
|
from fastapi import APIRouter, Depends, Query
|
|
|
|
from common.models.gmodel import PageParams, UserInfo
|
|
from router.v1.validator.dependencies import IsValidAccessToken, RemoveNoneResponse, RequireOwner
|
|
from services.supplier_service import SupplierService
|
|
from .protocol import (
|
|
Req_CheckCodes,
|
|
Req_CreateSupplier,
|
|
Req_UpdateSupplier,
|
|
Res_CheckCodes,
|
|
Res_DeleteSupplier,
|
|
Res_Supplier,
|
|
Res_SupplierList,
|
|
)
|
|
|
|
# 라우터(컨트롤러). 인증(Depends(IsValidAccessToken))으로 UserInfo 를 받아 company_id 로 스코프.
|
|
router = APIRouter(prefix="/v1/supplier", tags=["Supplier"], responses={404: {"description": "Not found"}})
|
|
|
|
|
|
@router.get(path="/list", response_model=Res_SupplierList, summary="협력사 목록")
|
|
async def list_suppliers(
|
|
service: SupplierService = Depends(),
|
|
user_info: UserInfo = Depends(IsValidAccessToken),
|
|
search: str | None = Query(None, description="협력사명/코드/담당자명 검색"),
|
|
pg: PageParams = Depends(),
|
|
):
|
|
return RemoveNoneResponse(await service.list_suppliers(user_info.company_id, search, pg))
|
|
|
|
|
|
@router.post(path="/create", response_model=Res_Supplier, summary="협력사 등록")
|
|
async def create_supplier(
|
|
req: Req_CreateSupplier, service: SupplierService = Depends(), user_info: UserInfo = Depends(IsValidAccessToken)
|
|
):
|
|
return RemoveNoneResponse(
|
|
await service.create_supplier(user_info.company_id, user_info.user_id, req)
|
|
)
|
|
|
|
|
|
@router.post(path="/check-codes", response_model=Res_CheckCodes, summary="코드 중복 사전검사(업로드 즉시)")
|
|
async def check_supplier_codes(
|
|
req: Req_CheckCodes, service: SupplierService = Depends(), user_info: UserInfo = Depends(IsValidAccessToken)
|
|
):
|
|
return RemoveNoneResponse(await service.check_codes(user_info.company_id, req.codes))
|
|
|
|
|
|
@router.get(path="/{supplier_id}", response_model=Res_Supplier, summary="협력사 조회")
|
|
async def get_supplier(supplier_id: UUID, service: SupplierService = Depends(), user_info: UserInfo = Depends(IsValidAccessToken)):
|
|
return RemoveNoneResponse(await service.get_supplier(user_info.company_id, str(supplier_id)))
|
|
|
|
|
|
@router.patch(path="/update/{supplier_id}", response_model=Res_Supplier, summary="협력사 수정")
|
|
async def update_supplier(
|
|
supplier_id: UUID, req: Req_UpdateSupplier, service: SupplierService = Depends(), user_info: UserInfo = Depends(IsValidAccessToken)
|
|
):
|
|
return RemoveNoneResponse(
|
|
await service.update_supplier(user_info.company_id, str(supplier_id), req)
|
|
)
|
|
|
|
|
|
@router.delete(path="/delete/{supplier_id}", response_model=Res_DeleteSupplier, summary="협력사 삭제 (최고관리자 전용)")
|
|
async def delete_supplier(supplier_id: UUID, service: SupplierService = Depends(), user_info: UserInfo = Depends(RequireOwner)):
|
|
# 협력사 명부는 회사 공유 자원 — 파괴적 삭제는 최고관리자만(RequireOwner 가 비-OWNER 를 403 차단).
|
|
return RemoveNoneResponse(await service.delete_supplier(user_info.company_id, str(supplier_id)))
|