adjust adime and sbar case

internal/domain/main-entities/adime/dto.go

@@ -4,14 +4,18 @@ import (
 	ecore "simrs-vx/internal/domain/base-entities/core"
 	eem "simrs-vx/internal/domain/main-entities/employee"
 	ee "simrs-vx/internal/domain/main-entities/encounter"
+
+	pa "simrs-vx/pkg/auth-helper"
 	"time"
 )
 
 type CreateDto struct {
 	Encounter_Id *uint      `json:"encounter_id"`
-	Employee_Id  *uint      `json:"employee_id"`
+	Employee_Id  *uint      `json:"-"`
 	Time         *time.Time `json:"time"`
 	Value        *string    `json:"value"`
+
+	pa.AuthInfo
 }
 
 type ReadListDto struct {

internal/domain/main-entities/sbar/dto.go

@@ -4,14 +4,18 @@ import (
 	ecore "simrs-vx/internal/domain/base-entities/core"
 	eem "simrs-vx/internal/domain/main-entities/employee"
 	ee "simrs-vx/internal/domain/main-entities/encounter"
+
+	pa "simrs-vx/pkg/auth-helper"
 	"time"
 )
 
 type CreateDto struct {
 	Encounter_Id *uint      `json:"encounter_id"`
-	Employee_Id  *uint      `json:"employee_id"`
+	Employee_Id  *uint      `json:"-"`
 	Time         *time.Time `json:"time"`
 	Value        *string    `json:"value"`
+
+	pa.AuthInfo
 }
 
 type ReadListDto struct {

internal/interface/main-handler/adime/handler.go

@@ -10,6 +10,10 @@ import (
 
 	e "simrs-vx/internal/domain/main-entities/adime"
 	u "simrs-vx/internal/use-case/main-use-case/adime"
+
+	pa "simrs-vx/pkg/auth-helper"
+
+	d "github.com/karincake/dodol"
 )
 
 type myBase struct{}
@@ -17,10 +21,15 @@ type myBase struct{}
 var O myBase
 
 func (obj myBase) Create(w http.ResponseWriter, r *http.Request) {
+	authInfo, err := pa.GetAuthInfo(r)
+	if err != nil {
+		rw.WriteJSON(w, http.StatusUnauthorized, d.IS{"message": err.Error()}, nil)
+	}
 	dto := e.CreateDto{}
 	if res := rw.ValidateStructByIOR(w, r.Body, &dto); !res {
 		return
 	}
+	dto.AuthInfo = *authInfo
 	res, err := u.Create(dto)
 	rw.DataResponse(w, res, err)
 }

internal/interface/main-handler/sbar/handler.go

@@ -10,6 +10,10 @@ import (
 
 	e "simrs-vx/internal/domain/main-entities/sbar"
 	u "simrs-vx/internal/use-case/main-use-case/sbar"
+
+	pa "simrs-vx/pkg/auth-helper"
+
+	d "github.com/karincake/dodol"
 )
 
 type myBase struct{}
@@ -17,10 +21,15 @@ type myBase struct{}
 var O myBase
 
 func (obj myBase) Create(w http.ResponseWriter, r *http.Request) {
+	authInfo, err := pa.GetAuthInfo(r)
+	if err != nil {
+		rw.WriteJSON(w, http.StatusUnauthorized, d.IS{"message": err.Error()}, nil)
+	}
 	dto := e.CreateDto{}
 	if res := rw.ValidateStructByIOR(w, r.Body, &dto); !res {
 		return
 	}
+	dto.AuthInfo = *authInfo
 	res, err := u.Create(dto)
 	rw.DataResponse(w, res, err)
 }

internal/use-case/main-use-case/adime/case.go

@@ -1,9 +1,14 @@
 package adime
 
 import (
-	e "simrs-vx/internal/domain/main-entities/adime"
+	"errors"
 	"strconv"
 
+	e "simrs-vx/internal/domain/main-entities/adime"
+	ee "simrs-vx/internal/domain/main-entities/employee"
+
+	ue "simrs-vx/internal/use-case/main-use-case/employee"
+
 	dg "github.com/karincake/apem/db-gorm-pg"
 	d "github.com/karincake/dodol"
 
@@ -34,6 +39,21 @@ func Create(input e.CreateDto) (*d.Data, error) {
 			return err
 		}
 
+		if !input.AuthInfo.IsDoctor() && !input.AuthInfo.IsNurse() {
+			event.Status = "failed"
+			event.ErrInfo = pl.ErrorInfo{
+				Code:   "auth-forbidden",
+				Detail: "user position is not allowed",
+				Raw:    errors.New("authentication failed"),
+			}
+			return pl.SetLogError(&event, input)
+		}
+
+		employee, err := ue.ReadDetailData(ee.ReadDetailDto{User_Id: &input.AuthInfo.User_Id}, &event, tx)
+		if err != nil {
+			return err
+		}
+		input.Employee_Id = &employee.Id
 		if resData, err := CreateData(input, &event, tx); err != nil {
 			return err
 		} else {

internal/use-case/main-use-case/sbar/case.go

@@ -1,9 +1,14 @@
 package sbar
 
 import (
-	e "simrs-vx/internal/domain/main-entities/sbar"
+	"errors"
 	"strconv"
 
+	ee "simrs-vx/internal/domain/main-entities/employee"
+	e "simrs-vx/internal/domain/main-entities/sbar"
+
+	ue "simrs-vx/internal/use-case/main-use-case/employee"
+
 	dg "github.com/karincake/apem/db-gorm-pg"
 	d "github.com/karincake/dodol"
 
@@ -34,6 +39,21 @@ func Create(input e.CreateDto) (*d.Data, error) {
 			return err
 		}
 
+		if !input.AuthInfo.IsDoctor() && !input.AuthInfo.IsNurse() {
+			event.Status = "failed"
+			event.ErrInfo = pl.ErrorInfo{
+				Code:   "auth-forbidden",
+				Detail: "user position is not allowed",
+				Raw:    errors.New("authentication failed"),
+			}
+			return pl.SetLogError(&event, input)
+		}
+
+		employee, err := ue.ReadDetailData(ee.ReadDetailDto{User_Id: &input.AuthInfo.User_Id}, &event, tx)
+		if err != nil {
+			return err
+		}
+		input.Employee_Id = &employee.Id
 		if resData, err := CreateData(input, &event, tx); err != nil {
 			return err
 		} else {