fix(reports): invalid group reporting. #290

polonel · Dec 23, 2019 · faa25b3 · faa25b3
1 parent 1f9291e
commit faa25b3
Showing 1 changed file with 78 additions and 29 deletions.
diff --git a/src/controllers/api/v1/reports.js b/src/controllers/api/v1/reports.js
@@ -156,10 +156,19 @@ apiReports.generate.ticketsByPriority = function (req, res) {
     [
       function (done) {
         if (_.includes(postData.groups, '-1')) {
-          groupSchema.getAllGroupsNoPopulate(function (err, grps) {
-            if (err) return done(err)
-            return done(null, grps)
-          })
+          if (req.user.role.isAdmin || req.user.role.isAgent) {
+            groupSchema.getAllGroupsNoPopulate(function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          } else {
+            groupSchema.getAllGroupsOfUser(req.user._id, function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          }
         } else {
           return done(null, postData.groups)
         }
@@ -232,11 +241,19 @@ apiReports.generate.ticketsByStatus = function (req, res) {
     [
       function (done) {
         if (_.includes(postData.groups, '-1')) {
-          groupSchema.getAllGroupsNoPopulate(function (err, grps) {
-            if (err) return done(err)
-
-            return done(null, grps)
-          })
+          if (req.user.role.isAdmin || req.user.role.isAgent) {
+            groupSchema.getAllGroupsNoPopulate(function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          } else {
+            groupSchema.getAllGroupsOfUser(req.user._id, function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          }
         } else {
           return done(null, postData.groups)
         }
@@ -313,11 +330,19 @@ apiReports.generate.ticketsByTags = function (req, res) {
     [
       function (done) {
         if (_.includes(postData.groups, '-1')) {
-          groupSchema.getAllGroupsNoPopulate(function (err, grps) {
-            if (err) return done(err)
-
-            return done(null, grps)
-          })
+          if (req.user.role.isAdmin || req.user.role.isAgent) {
+            groupSchema.getAllGroupsNoPopulate(function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          } else {
+            groupSchema.getAllGroupsOfUser(req.user._id, function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          }
         } else {
           return done(null, postData.groups)
         }
@@ -393,11 +418,19 @@ apiReports.generate.ticketsByType = function (req, res) {
     [
       function (done) {
         if (_.includes(postData.groups, '-1')) {
-          groupSchema.getAllGroupsNoPopulate(function (err, grps) {
-            if (err) return done(err)
-
-            return done(null, grps)
-          })
+          if (req.user.role.isAdmin || req.user.role.isAgent) {
+            groupSchema.getAllGroupsNoPopulate(function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          } else {
+            groupSchema.getAllGroupsOfUser(req.user._id, function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          }
         } else {
           return done(null, postData.groups)
         }
@@ -473,11 +506,19 @@ apiReports.generate.ticketsByUser = function (req, res) {
     [
       function (done) {
         if (_.includes(postData.groups, '-1')) {
-          groupSchema.getAllGroupsNoPopulate(function (err, grps) {
-            if (err) return done(err)
-
-            return done(null, grps)
-          })
+          if (req.user.role.isAdmin || req.user.role.isAgent) {
+            groupSchema.getAllGroupsNoPopulate(function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          } else {
+            groupSchema.getAllGroupsOfUser(req.user._id, function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          }
         } else {
           return done(null, postData.groups)
         }
@@ -522,11 +563,19 @@ apiReports.generate.ticketsByAssignee = function (req, res) {
     [
       function (done) {
         if (_.includes(postData.groups, '-1')) {
-          groupSchema.getAllGroupsNoPopulate(function (err, grps) {
-            if (err) return done(err)
-
-            return done(null, grps)
-          })
+          if (req.user.role.isAdmin || req.user.role.isAgent) {
+            groupSchema.getAllGroupsNoPopulate(function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          } else {
+            groupSchema.getAllGroupsOfUser(req.user._id, function (err, grps) {
+              if (err) return done(err)
+
+              return done(null, grps)
+            })
+          }
         } else {
           return done(null, postData.groups)
         }