softDelete features

app/expense/purchase_request.php

@@ -128,6 +128,9 @@
   <?php require '../include_ending.php'; ?>
 
   <script>
+
+  const can_delete = ['admin', 'owner'].includes(user_role);
+
   var status_badge = {
     '-1': '<span class="badge bg-secondary">Cancelled</span>',
      '0': '<span class="badge bg-warning text-dark">Draft</span>',
@@ -195,12 +198,31 @@
           <a href="<?php echo $server_url?>expense/manage_purchase_request.php?id=${r.id}" title="View">
             <i class="ti ti-eye fs-5"></i>
           </a>
+          ${can_delete ? `<a href="javascript:void(0);" class="link-danger ms-2" title="Delete" onclick="delete_request(${r.id})"><i class="ti ti-trash fs-5"></i></a>` : ''}
         </td>
       </tr>`;
     });
     $('table#request_list tbody').html(body);
   }
 
+  function delete_request(id) {
+    bootbox.confirm({
+      message: 'Delete this purchase request? This cannot be undone.',
+      buttons: { confirm: { label: 'Delete', className: 'btn-danger' }, cancel: { label: 'Back', className: 'btn-secondary' } },
+      callback: function(result) {
+        if (!result) return;
+        ajax_request({
+          url: '<?php echo $server_url?>po/api/engine/delete_purchase_request.php',
+          autoPrepare: false,
+          checkRequired: 0,
+          action: 'delete',
+          data: { id: id },
+          onSuccess: function() { retrieve_requests(); }
+        });
+      }
+    });
+  }
+
   $(async function() {
     await load_dept_cache();
     populate_dept_filter('filter_dept');