Files
ApiCore/ApiCore-Backend/src/queens/queens.controller.ts
T
Nick SzaunigandClaude Sonnet 5 f4b174ec56 feat: RBAC Phase 2a - Bienenvolk-Kern auf @RequirePermission umgestellt
Apiaries, Colonies, Queens, Inspections (+ ColonyInspections),
Tasks, TaskTemplates: @Roles(...) durch @RequirePermission(...) ersetzt.
Schliesst dabei die bisher ungeschuetzten GET-Routen (jeder eingeloggte
Nutzer konnte lesen, unabhaengig von seiner Rolle) mit :read-Rechten.
TaskTemplatesController verliert seinen klassenweiten @Roles-Blanket
zugunsten pro-Route-Rechten (gleiche effektive Berechtigung: nur
ADMIN/BEEKEEPER, jetzt ueber task-templates:* statt Rollen-Liste).

Verifiziert: tsc, lint, e2e (apiaries/colonies/queens/inspections/
tasks/task-templates, 29/29 gruen).

Co-Authored-By: Claude Sonnet 5 <[email protected]>
2026-08-26 06:57:04 +02:00

93 lines
2.6 KiB
TypeScript

import {
Body,
Controller,
Get,
Param,
Patch,
Post,
Query,
} from '@nestjs/common';
import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
import { QueenStatus } from '../../generated/prisma';
import { RequirePermission } from '../auth/decorators/require-permission.decorator';
import { CurrentUser } from '../auth/decorators/current-user.decorator';
import type { AuthenticatedUser } from '../auth/types/authenticated-user';
import { CreateQueenDto } from './dto/create-queen.dto';
import { UpdateQueenDto } from './dto/update-queen.dto';
import { AssignColonyDto } from './dto/assign-colony.dto';
import { CreateQueenEvaluationDto } from './dto/create-queen-evaluation.dto';
import { QueensService } from './queens.service';
@ApiTags('queens')
@ApiBearerAuth()
@Controller('queens')
export class QueensController {
constructor(private readonly queensService: QueensService) {}
@RequirePermission('queens:read')
@Get()
findAll(@Query('status') status?: QueenStatus) {
return this.queensService.findAll({ status });
}
@RequirePermission('queens:read')
@Get(':id')
findOne(@Param('id') id: string) {
return this.queensService.findById(id);
}
@RequirePermission('queens:read')
@Get(':id/history')
getHistory(@Param('id') id: string) {
return this.queensService.getHistory(id);
}
@RequirePermission('queens:read')
@Get(':id/lineage')
getLineage(@Param('id') id: string) {
return this.queensService.getLineage(id);
}
@RequirePermission('queens:create')
@Post()
create(@Body() dto: CreateQueenDto, @CurrentUser() actor: AuthenticatedUser) {
return this.queensService.create(dto, actor.id);
}
@RequirePermission('queens:update')
@Patch(':id')
update(
@Param('id') id: string,
@Body() dto: UpdateQueenDto,
@CurrentUser() actor: AuthenticatedUser,
) {
return this.queensService.update(id, dto, actor.id);
}
@RequirePermission('queens:assign')
@Post(':id/assign-colony')
assignColony(
@Param('id') id: string,
@Body() dto: AssignColonyDto,
@CurrentUser() actor: AuthenticatedUser,
) {
return this.queensService.assignColony(id, dto, actor.id);
}
@RequirePermission('queens:read')
@Get(':id/evaluations')
getEvaluations(@Param('id') id: string) {
return this.queensService.getEvaluations(id);
}
@RequirePermission('queens:evaluate')
@Post(':id/evaluations')
addEvaluation(
@Param('id') id: string,
@Body() dto: CreateQueenEvaluationDto,
@CurrentUser() actor: AuthenticatedUser,
) {
return this.queensService.addEvaluation(id, dto, actor.id);
}
}