nok/wms-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use roles guards

Browse Source
This commit is contained in:
Thanakorn S
2026-05-22 08:45:35 +07:00
parent b76dc679af
commit e36d304521
19 changed files with 133 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/accounting/api/engine/manage_account.php
+2
View File
@@ -3,6 +3,8 @@ session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes_ac/ChartOfAccounts.php';
require_role($user_role, ['owner', 'admin']);
if (empty($data['account_code']) || empty($data['account_name']) || empty($data['account_type'])) {
$answer['message'] = 'Account code, name, and type are required';
exit(json_encode($answer));
app/accounting/api/engine/manage_department.php
+2
View File
@@ -3,6 +3,8 @@ session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes_ac/DepartmentManager.php';
require_role($user_role, ['owner', 'admin']);
if (empty($data['dept_code']) || empty($data['dept_name'])) {
$answer['message'] = 'Department code and name are required';
exit(json_encode($answer));
app/accounting/api/engine/post_gl_entry.php
+2
View File
@@ -12,6 +12,8 @@ require '../../../assets/utils/classes_ac/posting/ReceiptPosting.php';
require '../../../assets/utils/classes_ac/posting/PaymentPosting.php';
require '../../../assets/utils/classes_ac/posting/PurchasePosting.php';
require_role($user_role, ['owner', 'admin']);
$doc_type = trim((string)($data['doc_type'] ?? ''));
$id = (int)($data['id'] ?? 0);
$formula_id = (int)($data['formula_id'] ?? 0) ?: null;
app/accounting/api/engine/remove_account.php
+2
View File
@@ -3,6 +3,8 @@ session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes_ac/ChartOfAccounts.php';
require_role($user_role, ['owner', 'admin']);
$id = (int)($data['id'] ?? 0);
if (!$id) {
$answer['message'] = 'Missing id';
app/accounting/api/engine/remove_department.php
+2
View File
@@ -3,6 +3,8 @@ session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes_ac/DepartmentManager.php';
require_role($user_role, ['owner', 'admin']);
$id = (int)($data['id'] ?? 0);
if (!$id) { $answer['message'] = 'Missing id'; exit(json_encode($answer)); }
app/accounting/api/engine/save_manual_journal.php
+2
View File
@@ -4,6 +4,8 @@ require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes_ac/PostingWindowGuard.php';
require '../../../assets/utils/classes_ac/GlManager.php';
require_role($user_role, ['owner', 'admin']);
$gl_id = (int)($data['gl_id'] ?? 0);
$reference = trim((string)($data['reference'] ?? ''));
$description = trim((string)($data['description'] ?? ''));