51 lines
1.4 KiB
PHP
51 lines
1.4 KiB
PHP
<?php
|
|
/**
|
|
* switch_branch.php — Switch the active company for the current session.
|
|
*
|
|
* action: 'read' → return list of companies the user belongs to
|
|
* action: 'update' → switch to the requested company_id
|
|
*/
|
|
session_start();
|
|
require '../../../assets/utils/db_auth.php';
|
|
require '../../../assets/utils/classes/UserManager.php';
|
|
|
|
$action = $data['action'] ?? '';
|
|
$um = new UserManager($pdo1, $company_id, $user_id);
|
|
|
|
if ($action === 'read') {
|
|
$answer['success'] = 1;
|
|
$answer['output'] = $um->getCompanyList();
|
|
$answer['current'] = (int)$_SESSION['login_company_id'];
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
if ($action === 'update') {
|
|
$target_company_id = (int)($data['company_id'] ?? 0);
|
|
|
|
if (!$target_company_id) {
|
|
$answer['message'] = 'Invalid company.';
|
|
http_response_code(400);
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
$target_map = $um->getCompanyAccess($target_company_id);
|
|
|
|
if (!$target_map) {
|
|
$answer['message'] = 'You do not have access to this company.';
|
|
http_response_code(403);
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
$_SESSION['login_company_id'] = $target_company_id;
|
|
$_SESSION['login_role'] = $target_map['role'] ?? 'viewer';
|
|
|
|
$answer['success'] = 1;
|
|
$answer['message'] = 'Switched successfully.';
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
$answer['message'] = 'Invalid action.';
|
|
http_response_code(400);
|
|
exit(json_encode($answer));
|
|
?>
|