Files
wms-app/app/ics/api/engine/approve_stock.php
T
Thanakorn SandClaude Sonnet 4.6 b07882e3f4 code audit fixes: require_once, issue flow, role guards
- Upgraded all plain `require` to `require_once` across 172 api/engine
  and api/engine_report files to prevent class-redeclaration errors
- Added issue button, issue_invoice() with GL toastr, and delete_invoice()
  to expense/manage_purchase_invoice.php, bringing it in line with
  po/manage_purchase_invoice.php
- Added can_delete role guard (admin/owner only) to trash icons on
  revenue/invoice.php and expense/purchase_invoice.php, matching the
  existing pattern in finance/receipt.php and finance/payment.php

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 17:06:08 +07:00

50 lines
1.5 KiB
PHP

<?php
/**
* approve_stock.php — Approve a draft td_stock row (status 0 → 1).
*
* Flips status to 1 and calls adjustBalance() so warehouse_balance
* reflects the transaction. This is the ONLY place adjustBalance() is
* called — both auto-approve (on save) and manual approve go through here.
*
* Expected $data keys:
* id int td_stock row id
* warehouse int warehouse_id (to resolve the dynamic table)
* type string 'in' | 'out' | 'transfer'
*/
session_start();
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_role($user_role, ['owner', 'admin']);
$id = (int)($data['id'] ?? 0);
$warehouse_id = (int)($data['warehouse'] ?? 0);
$type = $data['type'] ?? '';
if (!$id || !$warehouse_id || !in_array($type, ['in', 'out', 'transfer'])) {
http_response_code(400);
$answer['message'] = 'Invalid parameters.';
exit(json_encode($answer));
}
$stock = new StockManager($pdo2, $company_id);
$whMgmt = new WarehouseManager($pdo2, $company_id);
try {
$pdo2->beginTransaction();
$result = $stock->approveStock($id, $warehouse_id, $type, $whMgmt);
$pdo2->commit();
$answer['success'] = 1;
$answer['message'] = 'Stock approved.';
exit(json_encode($answer));
} catch (Exception $e) {
$pdo2->rollBack();
http_response_code(400);
$answer['message'] = $e->getMessage();
exit(json_encode($answer));
}