Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 | 6x 6x 6x 6x 6x 1x 5x 1x 4x 4x 1x 3x 1x 2x | import { TRPCError } from "@trpc/server";
import { z } from "zod";
import { getAccessRole } from "~web/handlers/receipts/utils";
import { authProcedure } from "~web/handlers/trpc";
import { receiptItemIdSchema } from "~web/handlers/validation";
export const procedure = authProcedure
.meta({
title: "Remove receipt item",
description: "Removes an item by id from its receipt.",
})
.input(
z.strictObject({
id: receiptItemIdSchema,
}),
)
.mutation(async ({ input, ctx }) => {
const { database } = ctx;
const receiptItem = await database
.selectFrom("receiptItems")
.innerJoin("receipts", (qb) =>
qb.onRef("receipts.id", "=", "receiptItems.receiptId"),
)
.select(["receipts.id as receiptId", "receipts.ownerUserId"])
.where("receiptItems.id", "=", input.id)
.limit(1)
.executeTakeFirst();
if (!receiptItem) {
throw new TRPCError({
code: "NOT_FOUND",
message: `Receipt item "${input.id}" is not found.`,
});
}
if (receiptItem.receiptId === input.id) {
throw new TRPCError({
code: "FORBIDDEN",
message: `Payers receipt item cannot be removed.`,
});
}
const accessRole = await getAccessRole(
database,
{ id: receiptItem.receiptId, ownerUserId: receiptItem.ownerUserId },
ctx.auth.userId,
);
if (!accessRole) {
throw new TRPCError({
code: "FORBIDDEN",
message: `Receipt "${receiptItem.receiptId}" is not allowed to be modified by "${ctx.auth.email}".`,
});
}
if (accessRole !== "owner" && accessRole !== "editor") {
throw new TRPCError({
code: "FORBIDDEN",
message: `Receipt "${receiptItem.receiptId}" is not allowed to be modified by "${ctx.auth.email}" with role "${accessRole}"`,
});
}
await database
.deleteFrom("receiptItems")
.where("id", "=", input.id)
.executeTakeFirst();
});
|