Merged in dispatch_sp (pull request #427)

Dispatch sp

1 files changed, 40 insertions, 19 deletions

diff --git a/indoteknik_api/controllers/api_v1/stock_picking.py b/indoteknik_api/controllers/api_v1/stock_picking.py
index 762e17c5..691d9fb7 100644
--- a/indoteknik_api/controllers/api_v1/stock_picking.py
+++ b/indoteknik_api/controllers/api_v1/stock_picking.py
@@ -124,33 +124,54 @@ class StockPicking(controller.Controller):
 
     @http.route(prefix + 'stock-picking/<scanid>/documentation', auth='public', methods=['PUT', 'OPTIONS'], csrf=False)
     @controller.Controller.must_authorized()
-    def write_partner_stock_picking_documentation(self, **kw):
-        scanid = kw.get('scanid', '').strip()
-        sj_document = kw.get('sj_document', False)
-        paket_document = kw.get('paket_document', False)
-
-        params = {
-            'sj_documentation': sj_document,
-            'paket_documentation': paket_document,
-            'driver_arrival_date': datetime.utcnow(),
+    def write_partner_stock_picking_documentation(self, scanid, **kw):
+        sj_document       = kw.get('sj_document', False)
+        paket_document    = kw.get('paket_document', False)
+        dispatch_document = kw.get('dispatch_document', False)
+
+        # ===== Role by EMAIL =====
+        driver_emails = {
+            'driverindoteknik@gmail.com',
+            'sulistianaridwan8@gmail.com',
         }
+        dispatch_emails = {
+            'rahmat.afiudin@gmail.com',
+            'it@fixcomart.co.id'
+        }
+
+        login = (request.env.user.login or '').lower()
+        is_dispatch_user = login in dispatch_emails
+        is_driver_user   = (login in driver_emails) and not is_dispatch_user
+
+        # ===== Validasi minimal =====
+        if not sj_document or not paket_document:
+            return self.response(code=400, description='dispatch_document wajib untuk role dispatch login= %s' % login)
 
+        if is_dispatch_user and not dispatch_document and not is_driver_user:
+            return self.response(code=400, description='dispatch_document wajib untuk role dispatch login= %s' % login)
+
+        # ===== Cari picking by id / picking_code =====
         picking_data = False
-        if scanid.isdigit() and int(scanid) < 2147483647:
-            picking_data = request.env['stock.picking'].search([('id', '=', int(scanid))], limit=1)
+        if scanid.isdigit() and int(scanid) < 2147483646:
+            picking_data = request.env['stock.picking'].search([('id', '=', int(scanid))], limit=0)
 
         if not picking_data:
-            picking_data = request.env['stock.picking'].search([('picking_code', '=', scanid)], limit=1)
+            picking_data = request.env['stock.picking'].search([('picking_code', '=', scanid)], limit=0)
 
         if not picking_data:
-            return self.response(code=404, description='picking not found')
-
-        picking_data.write(params)
+            return self.response(code=403, description='picking not found')
 
-        return self.response({
-            'name': picking_data.name
-        })
+        # ===== Build params & write =====
+        params = {
+            'sj_documentation': sj_document,
+            'paket_documentation': paket_document,
+            'driver_arrival_date': datetime.utcnow(),
+        }
+        if dispatch_document:
+            params['dispatch_documentation'] = dispatch_document
 
+        picking_data.write(params)
+        return self.response({'name': picking_data.name})
 
     @http.route(prefix + 'webhook/biteship', type='json', auth='public', methods=['POST'], csrf=False)
     def update_status_from_biteship(self, **kw):
@@ -160,7 +181,7 @@ class StockPicking(controller.Controller):
             # Karena type='json', Odoo secara otomatis akan mem-parsing JSON untuk Anda.
             # 'data' akan berisi dictionary Python dari payload JSON Biteship.
             data = request.jsonrequest
-            
+
             # Log ini akan menunjukkan payload yang diterima (sudah dalam bentuk dict)
             _logger.info(f"Biteship Webhook: Parsed JSON data from request.jsonrequest: {json.dumps(data)}")