|
@ -41,15 +41,11 @@ export class OrderController { |
|
|
@Inject(REQUEST) private readonly request: RequestWithUser |
|
|
@Inject(REQUEST) private readonly request: RequestWithUser |
|
|
) {} |
|
|
) {} |
|
|
|
|
|
|
|
|
@Delete(':id') |
|
|
@Delete() |
|
|
@UseGuards(AuthGuard('jwt')) |
|
|
@UseGuards(AuthGuard('jwt')) |
|
|
public async deleteOrder(@Param('id') id: string): Promise<OrderModel> { |
|
|
public async deleteOrders(): Promise<number> { |
|
|
const order = await this.orderService.order({ id }); |
|
|
|
|
|
|
|
|
|
|
|
if ( |
|
|
if ( |
|
|
!hasPermission(this.request.user.permissions, permissions.deleteOrder) || |
|
|
!hasPermission(this.request.user.permissions, permissions.deleteOrder) |
|
|
!order || |
|
|
|
|
|
order.userId !== this.request.user.id |
|
|
|
|
|
) { |
|
|
) { |
|
|
throw new HttpException( |
|
|
throw new HttpException( |
|
|
getReasonPhrase(StatusCodes.FORBIDDEN), |
|
|
getReasonPhrase(StatusCodes.FORBIDDEN), |
|
@ -57,16 +53,20 @@ export class OrderController { |
|
|
); |
|
|
); |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
return this.orderService.deleteOrder({ |
|
|
return this.orderService.deleteOrders({ |
|
|
id |
|
|
userId: this.request.user.id |
|
|
}); |
|
|
}); |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
@Delete() |
|
|
@Delete(':id') |
|
|
@UseGuards(AuthGuard('jwt')) |
|
|
@UseGuards(AuthGuard('jwt')) |
|
|
public async deleteOrders(): Promise<number> { |
|
|
public async deleteOrder(@Param('id') id: string): Promise<OrderModel> { |
|
|
|
|
|
const order = await this.orderService.order({ id }); |
|
|
|
|
|
|
|
|
if ( |
|
|
if ( |
|
|
!hasPermission(this.request.user.permissions, permissions.deleteOrder) |
|
|
!hasPermission(this.request.user.permissions, permissions.deleteOrder) || |
|
|
|
|
|
!order || |
|
|
|
|
|
order.userId !== this.request.user.id |
|
|
) { |
|
|
) { |
|
|
throw new HttpException( |
|
|
throw new HttpException( |
|
|
getReasonPhrase(StatusCodes.FORBIDDEN), |
|
|
getReasonPhrase(StatusCodes.FORBIDDEN), |
|
@ -74,8 +74,8 @@ export class OrderController { |
|
|
); |
|
|
); |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
return this.orderService.deleteOrders({ |
|
|
return this.orderService.deleteOrder({ |
|
|
userId: this.request.user.id |
|
|
id |
|
|
}); |
|
|
}); |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|