Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 | 6x 10x 10x 10x 10x 1x 9x 1x 8x 8x 1x 7x 1x 6x 6x 2x 2x 2x 2x 2x 2x 6x | import { TRPCError } from "@trpc/server";
import type { Updateable } from "kysely";
import { z } from "zod";
import {
priceSchema,
quantitySchema,
receiptItemNameSchema,
} from "~app/utils/validation";
import type { DB } from "~db/types.gen";
import { getAccessRole } from "~web/handlers/receipts/utils";
import { authProcedure } from "~web/handlers/trpc";
import { receiptItemIdSchema } from "~web/handlers/validation";
export const procedure = authProcedure
.meta({
title: "Update receipt item",
description:
"Updates the name, price, or quantity of an item by id on its receipt.",
})
.input(
z.strictObject({
id: receiptItemIdSchema,
update: z.discriminatedUnion("type", [
z.strictObject({
type: z.literal("name"),
name: receiptItemNameSchema,
}),
z.strictObject({ type: z.literal("price"), price: priceSchema }),
z.strictObject({
type: z.literal("quantity"),
quantity: quantitySchema,
}),
]),
}),
)
.mutation(async ({ input, ctx }) => {
const { database } = ctx;
const receiptItem = await database
.selectFrom("receiptItems")
.innerJoin("receipts", (qb) =>
qb.onRef("receipts.id", "=", "receiptItems.receiptId"),
)
.select(["receipts.id as receiptId", "receipts.ownerUserId"])
.where("receiptItems.id", "=", input.id)
.limit(1)
.executeTakeFirst();
if (!receiptItem) {
throw new TRPCError({
code: "NOT_FOUND",
message: `Receipt item "${input.id}" is not found.`,
});
}
if (receiptItem.receiptId === input.id) {
throw new TRPCError({
code: "FORBIDDEN",
message: `Payers receipt item cannot be updated.`,
});
}
const accessRole = await getAccessRole(
database,
{ id: receiptItem.receiptId, ownerUserId: receiptItem.ownerUserId },
ctx.auth.userId,
);
if (!accessRole) {
throw new TRPCError({
code: "FORBIDDEN",
message: `Receipt "${receiptItem.receiptId}" is not allowed to be modified by "${ctx.auth.email}".`,
});
}
if (accessRole !== "owner" && accessRole !== "editor") {
throw new TRPCError({
code: "FORBIDDEN",
message: `Receipt "${receiptItem.receiptId}" is not allowed to be modified by "${ctx.auth.email}" with role "${accessRole}"`,
});
}
let setObject: Updateable<DB["receiptItems"]> = {};
switch (input.update.type) {
case "name":
setObject = { name: input.update.name };
break;
case "price":
setObject = { price: input.update.price.toString() };
break;
case "quantity":
setObject = { quantity: input.update.quantity.toString() };
break;
}
await database
.updateTable("receiptItems")
.set(setObject)
.where("id", "=", input.id)
.executeTakeFirst();
});
|