olsch01
43b10869f0
Introduces a capability layer on top of existing roles that controls feature visibility and access. Capabilities follow an area.feature.action taxonomy (~35 capabilities) with sensible defaults per role. Tenant admins can customize via grant/revoke overrides stored in org settings JSONB. Key changes: - Add vice_president role to DB schema - Backend: capability constants, resolution logic, CapabilityGuard (global), @RequireCapability decorator on all 16 tenant controllers - Frontend: permission hooks (useCanEdit, useHasCapability), CapabilityGate component, sidebar filtering by capability, all 17 pages migrated from useIsReadOnly to capability-based checks - New admin UI: /settings/permissions matrix page for per-tenant role customization with grant/revoke delta model - GET /organizations/my-capabilities endpoint for capability refresh - Validation of permissionOverrides in settings updates Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
38 lines
1.4 KiB
TypeScript
38 lines
1.4 KiB
TypeScript
import { Controller, Get, Post, Param, Body, UseGuards, Request } from '@nestjs/common';
|
|
import { ApiTags, ApiOperation, ApiBearerAuth } from '@nestjs/swagger';
|
|
import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
|
|
import { RequireCapability } from '../../common/decorators/capability.decorator';
|
|
import { MonthlyActualsService } from './monthly-actuals.service';
|
|
|
|
@ApiTags('monthly-actuals')
|
|
@Controller('monthly-actuals')
|
|
@ApiBearerAuth()
|
|
@UseGuards(JwtAuthGuard)
|
|
export class MonthlyActualsController {
|
|
constructor(private monthlyActualsService: MonthlyActualsService) {}
|
|
|
|
@Get(':year/:month')
|
|
@ApiOperation({ summary: 'Get monthly actuals grid for a specific month' })
|
|
@RequireCapability('financials.actuals.view')
|
|
async getGrid(@Param('year') year: string, @Param('month') month: string) {
|
|
return this.monthlyActualsService.getActualsGrid(parseInt(year), parseInt(month));
|
|
}
|
|
|
|
@Post(':year/:month')
|
|
@ApiOperation({ summary: 'Save monthly actuals (creates reconciled journal entry)' })
|
|
@RequireCapability('financials.actuals.edit')
|
|
async save(
|
|
@Param('year') year: string,
|
|
@Param('month') month: string,
|
|
@Body() body: { lines: { accountId: string; amount: number }[] },
|
|
@Request() req: any,
|
|
) {
|
|
return this.monthlyActualsService.saveActuals(
|
|
parseInt(year),
|
|
parseInt(month),
|
|
body.lines,
|
|
req.user.sub,
|
|
);
|
|
}
|
|
}
|