Files
wms-app/app/accounting/api/engine/product_account_mapping.php
T
Thanakorn SandClaude Sonnet 4.6 b07882e3f4 code audit fixes: require_once, issue flow, role guards
- Upgraded all plain `require` to `require_once` across 172 api/engine
  and api/engine_report files to prevent class-redeclaration errors
- Added issue button, issue_invoice() with GL toastr, and delete_invoice()
  to expense/manage_purchase_invoice.php, bringing it in line with
  po/manage_purchase_invoice.php
- Added can_delete role guard (admin/owner only) to trash icons on
  revenue/invoice.php and expense/purchase_invoice.php, matching the
  existing pattern in finance/receipt.php and finance/payment.php

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 17:06:08 +07:00

43 lines
1.4 KiB
PHP

<?php
session_start();
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ProductManager.php';
require_once '../../../assets/utils/classes_ac/ChartOfAccounts.php';
require_role($user_role, ['owner', 'admin']);
try {
$id = (int)($data['id'] ?? 0);
if ($id <= 0) {
throw new Exception('Product is required.');
}
$sales_account_code = trim((string)($data['sales_account_code'] ?? '')) ?: null;
$purchase_account_code = trim((string)($data['purchase_account_code'] ?? '')) ?: null;
$coa = new ChartOfAccounts($pdo2, $company_id);
foreach ([
'Sales account' => $sales_account_code,
'Purchase account' => $purchase_account_code,
] as $label => $account_code) {
if ($account_code !== null && !$coa->isPostingAccount($account_code)) {
throw new Exception($label . ' must be an active posting account.');
}
}
dbTransaction($pdo2, function($pdo) use ($company_id, $id, $sales_account_code, $purchase_account_code, $logging) {
$product = new ProductManager($pdo, $company_id);
$product->updateAccountMapping($id, $sales_account_code, $purchase_account_code, $logging);
});
$answer['success'] = 1;
} catch (Exception $e) {
$answer['success'] = 0;
$answer['message'] = $e->getMessage();
http_response_code(400);
}
exit(json_encode($answer));
?>