68 lines
2.6 KiB
Python
68 lines
2.6 KiB
Python
from datetime import UTC, datetime
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from app.api.deps import get_current_telegram_user, log_audit
|
|
from app.api.service_visits import apply_vehicle_change
|
|
from app.db.session import get_session
|
|
from app.models.car import Car, VehicleDataChangeRequest
|
|
from app.models.user import User
|
|
from app.schemas.service_center import VehicleDataChangeRequestRead
|
|
|
|
router = APIRouter(prefix="/vehicle-change-requests", tags=["vehicle-change-requests"])
|
|
|
|
|
|
@router.post("/{request_id}/approve", response_model=VehicleDataChangeRequestRead)
|
|
async def approve_vehicle_change_request(
|
|
request_id: int,
|
|
session: AsyncSession = Depends(get_session),
|
|
current_user: User = Depends(get_current_telegram_user),
|
|
) -> VehicleDataChangeRequest:
|
|
request = await session.get(VehicleDataChangeRequest, request_id)
|
|
if request is None:
|
|
raise HTTPException(status_code=404, detail="Change request not found")
|
|
if request.owner_user_id != current_user.id:
|
|
raise HTTPException(status_code=403, detail="Forbidden")
|
|
vehicle = await session.get(Car, request.vehicle_id)
|
|
if vehicle is None:
|
|
raise HTTPException(status_code=404, detail="Vehicle not found")
|
|
apply_vehicle_change(vehicle, request.field_name, request.new_value)
|
|
request.status = "approved"
|
|
request.resolved_at = datetime.now(UTC)
|
|
await log_audit(
|
|
session,
|
|
actor=current_user,
|
|
action="vehicle_change_request.approve",
|
|
target_type="vehicle_change_request",
|
|
target_id=request_id,
|
|
)
|
|
await session.commit()
|
|
await session.refresh(request)
|
|
return request
|
|
|
|
|
|
@router.post("/{request_id}/reject", response_model=VehicleDataChangeRequestRead)
|
|
async def reject_vehicle_change_request(
|
|
request_id: int,
|
|
session: AsyncSession = Depends(get_session),
|
|
current_user: User = Depends(get_current_telegram_user),
|
|
) -> VehicleDataChangeRequest:
|
|
request = await session.get(VehicleDataChangeRequest, request_id)
|
|
if request is None:
|
|
raise HTTPException(status_code=404, detail="Change request not found")
|
|
if request.owner_user_id != current_user.id:
|
|
raise HTTPException(status_code=403, detail="Forbidden")
|
|
request.status = "rejected"
|
|
request.resolved_at = datetime.now(UTC)
|
|
await log_audit(
|
|
session,
|
|
actor=current_user,
|
|
action="vehicle_change_request.reject",
|
|
target_type="vehicle_change_request",
|
|
target_id=request_id,
|
|
)
|
|
await session.commit()
|
|
await session.refresh(request)
|
|
return request
|