dolibarr  x.y.z
api_boms.class.php
Go to the documentation of this file.
1 <?php
2 /* Copyright (C) 2015 Jean-François Ferry <jfefe@aternatik.fr>
3  * Copyright (C) 2019 Maxime Kohlhaas <maxime@atm-consulting.fr>
4  * Copyright (C) 2020 Frédéric France <frederic.france@netlogic.fr>
5  * Copyright (C) 2022 Christian Humpel <christian.humpel@live.com>
6  *
7  * This program is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License as published by
9  * the Free Software Foundation; either version 3 of the License, or
10  * (at your option) any later version.
11  *
12  * This program is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15  * GNU General Public License for more details.
16  *
17  * You should have received a copy of the GNU General Public License
18  * along with this program. If not, see <https://www.gnu.org/licenses/>.
19  */
20 
21 use Luracast\Restler\RestException;
22 
23 require_once DOL_DOCUMENT_ROOT.'/bom/class/bom.class.php';
24 
25 
38 class Boms extends DolibarrApi
39 {
43  public $bom;
44 
48  public function __construct()
49  {
50  global $db, $conf;
51  $this->db = $db;
52  $this->bom = new BOM($this->db);
53  }
54 
66  public function get($id)
67  {
68  if (!DolibarrApiAccess::$user->rights->bom->read) {
69  throw new RestException(401);
70  }
71 
72  $result = $this->bom->fetch($id);
73  if (!$result) {
74  throw new RestException(404, 'BOM not found');
75  }
76 
77  if (!DolibarrApi::_checkAccessToResource('bom', $this->bom->id, 'bom_bom')) {
78  throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
79  }
80 
81  return $this->_cleanObjectDatas($this->bom);
82  }
83 
84 
99  public function index($sortfield = "t.rowid", $sortorder = 'ASC', $limit = 100, $page = 0, $sqlfilters = '')
100  {
101  global $db, $conf;
102 
103  if (!DolibarrApiAccess::$user->rights->bom->read) {
104  throw new RestException(401);
105  }
106 
107  $obj_ret = array();
108  $tmpobject = new BOM($this->db);
109 
110  $socid = DolibarrApiAccess::$user->socid ? DolibarrApiAccess::$user->socid : '';
111 
112  $restrictonsocid = 0; // Set to 1 if there is a field socid in table of object
113 
114  // If the internal user must only see his customers, force searching by him
115  $search_sale = 0;
116  if ($restrictonsocid && !DolibarrApiAccess::$user->rights->societe->client->voir && !$socid) {
117  $search_sale = DolibarrApiAccess::$user->id;
118  }
119 
120  $sql = "SELECT t.rowid";
121  if ($restrictonsocid && (!DolibarrApiAccess::$user->rights->societe->client->voir && !$socid) || $search_sale > 0) {
122  $sql .= ", sc.fk_soc, sc.fk_user"; // We need these fields in order to filter by sale (including the case where the user can only see his prospects)
123  }
124  $sql .= " FROM ".MAIN_DB_PREFIX.$tmpobject->table_element." as t";
125 
126  if ($restrictonsocid && (!DolibarrApiAccess::$user->rights->societe->client->voir && !$socid) || $search_sale > 0) {
127  $sql .= ", ".MAIN_DB_PREFIX."societe_commerciaux as sc"; // We need this table joined to the select in order to filter by sale
128  }
129  $sql .= " WHERE 1 = 1";
130 
131  // Example of use $mode
132  //if ($mode == 1) $sql.= " AND s.client IN (1, 3)";
133  //if ($mode == 2) $sql.= " AND s.client IN (2, 3)";
134 
135  if ($tmpobject->ismultientitymanaged) {
136  $sql .= ' AND t.entity IN ('.getEntity($tmpobject->element).')';
137  }
138  if ($restrictonsocid && (!DolibarrApiAccess::$user->rights->societe->client->voir && !$socid) || $search_sale > 0) {
139  $sql .= " AND t.fk_soc = sc.fk_soc";
140  }
141  if ($restrictonsocid && $socid) {
142  $sql .= " AND t.fk_soc = ".((int) $socid);
143  }
144  if ($restrictonsocid && $search_sale > 0) {
145  $sql .= " AND t.rowid = sc.fk_soc"; // Join for the needed table to filter by sale
146  }
147  // Insert sale filter
148  if ($restrictonsocid && $search_sale > 0) {
149  $sql .= " AND sc.fk_user = ".((int) $search_sale);
150  }
151  if ($sqlfilters) {
152  $errormessage = '';
153  if (!DolibarrApi::_checkFilters($sqlfilters, $errormessage)) {
154  throw new RestException(503, 'Error when validating parameter sqlfilters -> '.$errormessage);
155  }
156  $regexstring = '\‍(([^:\'\‍(\‍)]+:[^:\'\‍(\‍)]+:[^\‍(\‍)]+)\‍)';
157  $sql .= " AND (".preg_replace_callback('/'.$regexstring.'/', 'DolibarrApi::_forge_criteria_callback', $sqlfilters).")";
158  }
159 
160  $sql .= $this->db->order($sortfield, $sortorder);
161  if ($limit) {
162  if ($page < 0) {
163  $page = 0;
164  }
165  $offset = $limit * $page;
166 
167  $sql .= $this->db->plimit($limit + 1, $offset);
168  }
169 
170  $result = $this->db->query($sql);
171  if ($result) {
172  $num = $this->db->num_rows($result);
173  $i = 0;
174  while ($i < $num) {
175  $obj = $this->db->fetch_object($result);
176  $bom_static = new BOM($this->db);
177  if ($bom_static->fetch($obj->rowid)) {
178  $obj_ret[] = $this->_cleanObjectDatas($bom_static);
179  }
180  $i++;
181  }
182  } else {
183  throw new RestException(503, 'Error when retrieve bom list');
184  }
185  if (!count($obj_ret)) {
186  throw new RestException(404, 'No bom found');
187  }
188  return $obj_ret;
189  }
190 
197  public function post($request_data = null)
198  {
199  if (!DolibarrApiAccess::$user->rights->bom->write) {
200  throw new RestException(401);
201  }
202  // Check mandatory fields
203  $result = $this->_validate($request_data);
204 
205  foreach ($request_data as $field => $value) {
206  $this->bom->$field = $value;
207  }
208  if (!$this->bom->create(DolibarrApiAccess::$user)) {
209  throw new RestException(500, "Error creating BOM", array_merge(array($this->bom->error), $this->bom->errors));
210  }
211  return $this->bom->id;
212  }
213 
222  public function put($id, $request_data = null)
223  {
224  if (!DolibarrApiAccess::$user->rights->bom->write) {
225  throw new RestException(401);
226  }
227 
228  $result = $this->bom->fetch($id);
229  if (!$result) {
230  throw new RestException(404, 'BOM not found');
231  }
232 
233  if (!DolibarrApi::_checkAccessToResource('bom', $this->bom->id, 'bom_bom')) {
234  throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
235  }
236 
237  foreach ($request_data as $field => $value) {
238  if ($field == 'id') {
239  continue;
240  }
241  $this->bom->$field = $value;
242  }
243 
244  if ($this->bom->update(DolibarrApiAccess::$user) > 0) {
245  return $this->get($id);
246  } else {
247  throw new RestException(500, $this->bom->error);
248  }
249  }
250 
257  public function delete($id)
258  {
259  if (!DolibarrApiAccess::$user->rights->bom->delete) {
260  throw new RestException(401);
261  }
262  $result = $this->bom->fetch($id);
263  if (!$result) {
264  throw new RestException(404, 'BOM not found');
265  }
266 
267  if (!DolibarrApi::_checkAccessToResource('bom', $this->bom->id, 'bom_bom')) {
268  throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
269  }
270 
271  if (!$this->bom->delete(DolibarrApiAccess::$user)) {
272  throw new RestException(500, 'Error when deleting BOM : '.$this->bom->error);
273  }
274 
275  return array(
276  'success' => array(
277  'code' => 200,
278  'message' => 'BOM deleted'
279  )
280  );
281  }
282 
292  public function getLines($id)
293  {
294  if (!DolibarrApiAccess::$user->rights->bom->read) {
295  throw new RestException(401);
296  }
297 
298  $result = $this->bom->fetch($id);
299  if (!$result) {
300  throw new RestException(404, 'BOM not found');
301  }
302 
303  if (!DolibarrApi::_checkAccessToResource('bom_bom', $this->bom->id)) {
304  throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
305  }
306  $this->bom->getLinesArray();
307  $result = array();
308  foreach ($this->bom->lines as $line) {
309  array_push($result, $this->_cleanObjectDatas($line));
310  }
311  return $result;
312  }
313 
324  public function postLine($id, $request_data = null)
325  {
326  if (!DolibarrApiAccess::$user->rights->bom->write) {
327  throw new RestException(401);
328  }
329 
330  $result = $this->bom->fetch($id);
331  if (!$result) {
332  throw new RestException(404, 'BOM not found');
333  }
334 
335  if (!DolibarrApi::_checkAccessToResource('bom_bom', $this->bom->id)) {
336  throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
337  }
338 
339  $request_data = (object) $request_data;
340 
341  $updateRes = $this->bom->addLine(
342  $request_data->fk_product,
343  $request_data->qty,
344  $request_data->qty_frozen,
345  $request_data->disable_stock_change,
346  $request_data->efficiency,
347  $request_data->position,
348  $request_data->fk_bom_child,
349  $request_data->import_key
350  );
351 
352  if ($updateRes > 0) {
353  return $updateRes;
354  } else {
355  throw new RestException(400, $this->bom->error);
356  }
357  }
358 
370  public function putLine($id, $lineid, $request_data = null)
371  {
372  if (!DolibarrApiAccess::$user->rights->bom->write) {
373  throw new RestException(401);
374  }
375 
376  $result = $this->bom->fetch($id);
377  if (!$result) {
378  throw new RestException(404, 'BOM not found');
379  }
380 
381  if (!DolibarrApi::_checkAccessToResource('bom_bom', $this->bom->id)) {
382  throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
383  }
384 
385  $request_data = (object) $request_data;
386 
387  $updateRes = $this->bom->updateLine(
388  $lineid,
389  $request_data->qty,
390  $request_data->qty_frozen,
391  $request_data->disable_stock_change,
392  $request_data->efficiency,
393  $request_data->position,
394  $request_data->import_key
395  );
396 
397  if ($updateRes > 0) {
398  $result = $this->get($id);
399  unset($result->line);
400  return $this->_cleanObjectDatas($result);
401  }
402  return false;
403  }
404 
420  public function deleteLine($id, $lineid)
421  {
422  if (!DolibarrApiAccess::$user->rights->bom->write) {
423  throw new RestException(401);
424  }
425 
426  $result = $this->bom->fetch($id);
427  if (!$result) {
428  throw new RestException(404, 'BOM not found');
429  }
430 
431  if (!DolibarrApi::_checkAccessToResource('bom_bom', $this->bom->id)) {
432  throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
433  }
434 
435  //Check the rowid is a line of current bom object
436  $lineIdIsFromObject = false;
437  foreach ($this->bom->lines as $bl) {
438  if ($bl->id == $lineid) {
439  $lineIdIsFromObject = true;
440  break;
441  }
442  }
443  if (!$lineIdIsFromObject) {
444  throw new RestException(500, 'Line to delete (rowid: '.$lineid.') is not a line of BOM (id: '.$this->bom->id.')');
445  }
446 
447  $updateRes = $this->bom->deleteline(DolibarrApiAccess::$user, $lineid);
448  if ($updateRes > 0) {
449  return $this->get($id);
450  } else {
451  throw new RestException(405, $this->bom->error);
452  }
453  }
454 
455  // phpcs:disable PEAR.NamingConventions.ValidFunctionName.PublicUnderscore
462  protected function _cleanObjectDatas($object)
463  {
464  // phpcs:enable
465  $object = parent::_cleanObjectDatas($object);
466 
467  unset($object->rowid);
468  unset($object->canvas);
469 
470  unset($object->name);
471  unset($object->lastname);
472  unset($object->firstname);
473  unset($object->civility_id);
474  unset($object->statut);
475  unset($object->state);
476  unset($object->state_id);
477  unset($object->state_code);
478  unset($object->region);
479  unset($object->region_code);
480  unset($object->country);
481  unset($object->country_id);
482  unset($object->country_code);
483  unset($object->barcode_type);
484  unset($object->barcode_type_code);
485  unset($object->barcode_type_label);
486  unset($object->barcode_type_coder);
487  unset($object->total_ht);
488  unset($object->total_tva);
489  unset($object->total_localtax1);
490  unset($object->total_localtax2);
491  unset($object->total_ttc);
492  unset($object->fk_account);
493  unset($object->comments);
494  unset($object->note);
495  unset($object->mode_reglement_id);
496  unset($object->cond_reglement_id);
497  unset($object->cond_reglement);
498  unset($object->shipping_method_id);
499  unset($object->fk_incoterms);
500  unset($object->label_incoterms);
501  unset($object->location_incoterms);
502 
503  // If object has lines, remove $db property
504  if (isset($object->lines) && is_array($object->lines) && count($object->lines) > 0) {
505  $nboflines = count($object->lines);
506  for ($i = 0; $i < $nboflines; $i++) {
507  $this->_cleanObjectDatas($object->lines[$i]);
508 
509  unset($object->lines[$i]->lines);
510  unset($object->lines[$i]->note);
511  }
512  }
513 
514  return $object;
515  }
516 
525  private function _validate($data)
526  {
527  $myobject = array();
528  foreach ($this->bom->fields as $field => $propfield) {
529  if (in_array($field, array('rowid', 'entity', 'date_creation', 'tms', 'fk_user_creat')) || $propfield['notnull'] != 1) {
530  continue; // Not a mandatory field
531  }
532  if (!isset($data[$field])) {
533  throw new RestException(400, "$field field missing");
534  }
535  $myobject[$field] = $data[$field];
536  }
537  return $myobject;
538  }
539 }
Class for BOM.
Definition: bom.class.php:36
put($id, $request_data=null)
Update bom.
_cleanObjectDatas($object)
Clean sensible object datas.
putLine($id, $lineid, $request_data=null)
Update a line to given BOM.
post($request_data=null)
Create bom object.
getLines($id)
Get lines of an BOM.
__construct()
Constructor.
deleteLine($id, $lineid)
Delete a line to given BOM.
postLine($id, $request_data=null)
Add a line to given BOM.
index($sortfield="t.rowid", $sortorder='ASC', $limit=100, $page=0, $sqlfilters='')
List boms.
_validate($data)
Validate fields before create or update object.
Class for API REST v1.
Definition: api.class.php:31
static _checkAccessToResource($resource, $resource_id=0, $dbtablename='', $feature2='', $dbt_keyfield='fk_soc', $dbt_select='rowid')
Check access by user to a given resource.
Definition: api.class.php:283
_checkFilters($sqlfilters, &$error='')
Return if a $sqlfilters parameter is valid.
Definition: api.class.php:310
$conf db
API class for accounts.
Definition: inc.php:41