nok/wms-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

roles guard + docs + logo

Browse Source
This commit is contained in:
Thanakorn S
2026-05-06 16:37:20 +07:00
parent 797dee5d17
commit 2eb6a1a315
60 changed files with 496 additions and 105 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/ics/api/engine/location_barcode_label.php
+4
View File
@@ -33,6 +33,10 @@
$aisle = trim($data['aisle'] ?? '');
$rack = trim($data['rack'] ?? '');
if ($label_action !== 'list') {
require_role($user_role, ['owner', 'admin', 'staff']);
}
if ($label_action === 'list') {
$sth = $pdo2->prepare(
"SELECT barcode, warehouse_id, zone, aisle, rack, status, print_count, last_printed_dt
app/ics/api/engine/manage_stock_in.php
+2
View File
@@ -5,6 +5,8 @@
require '../../../assets/utils/classes/WarehouseManager.php';
require '../../../assets/utils/classes/CompanySettingManager.php';
require_role($user_role, ['owner', 'admin', 'staff']);
$csm = new CompanySettingManager($pdo1, $company_id);
$auto_approve = (int)$csm->get('default_stock_status') === 1;
app/ics/api/engine/manage_stock_out.php
+2
View File
@@ -5,6 +5,8 @@
require '../../../assets/utils/classes/WarehouseManager.php';
require '../../../assets/utils/classes/CompanySettingManager.php';
require_role($user_role, ['owner', 'admin', 'staff']);
$csm = new CompanySettingManager($pdo1, $company_id);
$auto_approve = (int)$csm->get('default_stock_status') === 1;
app/ics/api/engine/manage_stock_transfer.php
+2
View File
@@ -5,6 +5,8 @@
require '../../../assets/utils/classes/WarehouseManager.php';
require '../../../assets/utils/classes/CompanySettingManager.php';
require_role($user_role, ['owner', 'admin', 'staff']);
$csm = new CompanySettingManager($pdo1, $company_id);
$auto_approve = (int)$csm->get('default_stock_status') === 1;
app/ics/api/engine/sku_barcode_label.php
+4
View File
@@ -127,6 +127,10 @@
$product_sku = trim($data['product_sku'] ?? '');
$lot_number = trim($data['lot_number'] ?? '');
if (in_array($label_action, ['create', 'print', 'disable', 'enable'], true)) {
require_role($user_role, ['owner', 'admin', 'staff']);
}
if ($label_action === 'print') {
$barcode = trim($data['barcode'] ?? '');
if ($barcode === '') {
app/ics/api/engine/validate_scan_location.php
+2
View File
@@ -3,6 +3,8 @@
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_role($user_role, ['owner', 'admin', 'staff']);
$whMgmt = new WarehouseManager($pdo2, $company_id);
$mode = $data['mode'] ?? '';
app/ics/location_barcode_label.php
+7 -3
View File
@@ -1,6 +1,10 @@
<?php
session_start();
require '../config.php';
if (!in_array($_SESSION['login_role'] ?? 'viewer', ['owner', 'admin', 'staff'], true)) {
http_response_code(403);
exit('Access denied.');
}
require '../include_header.php';
?>
@@ -17,13 +21,13 @@
<p class="mb-0 text-muted">Print or reprint labels from the rack master list.</p>
</div>
<div class="d-flex gap-2">
<button id="btn_print" class="btn btn-outline-success" onclick="print_selected_label()" disabled>
<button id="btn_print" class="btn btn-outline-success" data-min-role="staff" onclick="print_selected_label()" disabled>
<i class="ti ti-printer me-1"></i>Print
</button>
<button id="btn_disable" class="btn btn-outline-danger" onclick="disable_selected_label()" disabled>
<button id="btn_disable" class="btn btn-outline-danger" data-min-role="staff" onclick="disable_selected_label()" disabled>
<i class="ti ti-ban me-1"></i>Disable
</button>
<button id="btn_reenable" class="btn btn-outline-primary d-none" onclick="reenable_selected_label()">
<button id="btn_reenable" class="btn btn-outline-primary d-none" data-min-role="staff" onclick="reenable_selected_label()">
<i class="ti ti-refresh me-1"></i>Re-enable
</button>
</div>
app/ics/manage_stock_in.php
+5 -1
View File
@@ -1,6 +1,10 @@
<?php
session_start();
require '../config.php';
if (!in_array($_SESSION['login_role'] ?? 'viewer', ['owner', 'admin', 'staff'], true)) {
http_response_code(403);
exit('Access denied.');
}
require '../include_header.php';
?>
@@ -114,7 +118,7 @@
<!-- Submit Button -->
<div class="mb-3 col-lg-12">
<button type="submit" class="btn btn-primary" onclick="manage_stock_in();">Add Stock</button>
<button type="submit" class="btn btn-primary" data-min-role="staff" onclick="manage_stock_in();">Add Stock</button>
<button type="button" class="btn btn-success ms-2 d-none" id="approve_stock_btn" onclick="approve_current_stock();">Approve</button>
</div>
</form>
app/ics/manage_stock_out.php
+5 -1
View File
@@ -1,6 +1,10 @@
<?php
session_start();
require '../config.php';
if (!in_array($_SESSION['login_role'] ?? 'viewer', ['owner', 'admin', 'staff'], true)) {
http_response_code(403);
exit('Access denied.');
}
require '../include_header.php';
?>
@@ -103,7 +107,7 @@
<!-- Submit Button -->
<div class="mb-3 col-lg-12">
<button type="submit" class="btn btn-primary" onclick="manage_stock_out();">Remove Stock</button>
<button type="submit" class="btn btn-primary" data-min-role="staff" onclick="manage_stock_out();">Remove Stock</button>
<button type="button" class="btn btn-success ms-2 d-none" id="approve_stock_btn" onclick="approve_current_stock();">Approve</button>
</div>
</form>
app/ics/manage_stock_transfer.php
+5 -1
View File
@@ -1,6 +1,10 @@
<?php
session_start();
require '../config.php';
if (!in_array($_SESSION['login_role'] ?? 'viewer', ['owner', 'admin', 'staff'], true)) {
http_response_code(403);
exit('Access denied.');
}
require '../include_header.php';
?>
@@ -135,7 +139,7 @@
<!-- Submit -->
<div class="mb-3 col-lg-12">
<button type="submit" class="btn btn-primary" onclick="manage_stock_transfer();">Transfer Stock</button>
<button type="submit" class="btn btn-primary" data-min-role="staff" onclick="manage_stock_transfer();">Transfer Stock</button>
<button type="button" class="btn btn-success ms-2 d-none" id="approve_stock_btn" onclick="approve_current_stock();">Approve</button>
</div>
</form>
app/ics/sku_barcode_label.php
+7 -3
View File
@@ -1,6 +1,10 @@
<?php
session_start();
require '../config.php';
if (!in_array($_SESSION['login_role'] ?? 'viewer', ['owner', 'admin', 'staff'], true)) {
http_response_code(403);
exit('Access denied.');
}
require '../include_header.php';
?>
@@ -17,13 +21,13 @@
<p class="mb-0 text-muted">Print or reprint product identity labels from the lot master list.</p>
</div>
<div class="d-flex gap-2">
<button class="btn btn-success" onclick="open_create_label_modal()">
<button class="btn btn-success" data-min-role="staff" onclick="open_create_label_modal()">
<i class="ti ti-plus me-1"></i>New Barcode
</button>
<button id="btn_print" class="btn btn-outline-success" onclick="print_selected_label()" disabled>
<button id="btn_print" class="btn btn-outline-success" data-min-role="staff" onclick="print_selected_label()" disabled>
<i class="ti ti-printer me-1"></i>Print
</button>
<button id="btn_disable" class="btn btn-outline-danger" onclick="disable_selected_label()" disabled>
<button id="btn_disable" class="btn btn-outline-danger" data-min-role="staff" onclick="disable_selected_label()" disabled>
<i class="ti ti-ban me-1"></i>Disable
</button>
</div>