Merge branch 'staging' into release

1 files changed, 61 insertions, 0 deletions

diff --git a/indoteknik_api/controllers/api_v1/partner.py b/indoteknik_api/controllers/api_v1/partner.py
index 09b3caa0..ba59a1ce 100644
--- a/indoteknik_api/controllers/api_v1/partner.py
+++ b/indoteknik_api/controllers/api_v1/partner.py
@@ -81,3 +81,64 @@ class Partner(controller.Controller):
             'id': partner.id,
         })
 
+    @http.route(prefix + 'partner/<id>', auth='public', methods=['PUT', 'OPTIONS'], csrf=False)
+    def write_partner_by_id(self, **kw):
+        user_token = self.authenticate()
+        if not user_token:
+            return self.unauthorized_response()
+
+        params = self.get_request_params(kw, {
+            'id': ['required', 'number'],
+            'name': [],
+            'company_type_id': ['number'],
+            'industry_id': ['number'],
+            'tax_name': ['alias:nama_wajib_pajak'],
+            'npwp': [],
+        })
+
+        if not params['valid']:
+            return self.response(code=400, description=params)
+        
+        partner = request.env[self._name].search([('id', '=', params['value']['id'])], limit=1)
+        if not partner:
+            return self.response(code=404, description='User not found')
+
+        if user_token['partner_id'] not in self.get_partner_child_ids(partner.id): 
+            return self.unauthorized_response()
+            
+        partner.write(params['value'])
+
+        return self.response({
+            'id': partner.id
+        })
+
+    @http.route(prefix + 'partner/industry', auth='public', methods=['GET', 'OPTIONS'])
+    def get_partner_industry(self):
+        if not self.authenticate():
+            return self.response(code=401, description='Unauthorized')
+        
+        partner_industry = request.env['res.partner.industry'].search([])
+        data = []
+        for industry in partner_industry:
+            data.append({
+                'id': industry.id,
+                'name': industry.name
+            })
+
+        return self.response(data)
+
+    @http.route(prefix + 'partner/company_type', auth='public', methods=['GET', 'OPTIONS'])
+    def get_partner_company_type(self):
+        if not self.authenticate():
+            return self.response(code=401, description='Unauthorized')
+        
+        partner_company_type = request.env['res.partner.company_type'].search([])
+        data = []
+        for company_type in partner_company_type:
+            data.append({
+                'id': company_type.id,
+                'name': company_type.name
+            })
+
+        return self.response(data)
+