Luca/thetool
1
0
Fork 0
Code Issues 5 Pull Requests 5 Actions Packages Projects Releases Wiki Activity

Merge branch 'fronkdev' into 'master'

Browse Source 
Added check for preorderType in address and campaign to PreorderApi/submit

See merge request fronk/thetool!49
This commit is contained in:
Frank Schubert
2023-07-19 09:45:44 +00:00
parent 609b15ae8b 6568394aeb
commit 85aaf66e18
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
application/Api/v1/PreorderApicontroller.php
View File

@@ -535,6 +535,24 @@ class PreorderApicontroller extends mfBaseApicontroller {
return mfResponse::Forbidden(['message' => "Bestellung in diesem Netzgebiet/Cluster nicht erlaubt"]);
}
// check for allowed PreorderType in address
$allowed_freigabe = json_decode($address->freigabe);
if(!is_array($allowed_freigabe) || !count($allowed_freigabe)) {
return mfResponse::Forbidden(['message' => "Adresse (noch) nicht bestellbar"]);
}
if(!in_array($type, $allowed_freigabe)) {
return mfResponse::Forbidden(['message' => "Adresse (noch) nicht bestellbar"]);
}
// check for allowed PreorderType in campaign
$allowed_campaigntypes = $this->campaign->types;
if(!is_array($allowed_campaigntypes) || !count($allowed_campaigntypes)) {
return mfResponse::Forbidden(['message' => "PreorderType not allowed"]);
}
if(!array_key_exists($type, $allowed_campaigntypes)) {
return mfResponse::Forbidden(['message' => "PreorderType not allowed"]);
}
/*
* build fields
*/