src/Controller/Api/v3/MaterialRequestController.php line 339

Open in your IDE?
  1. <?php
  3. namespace App\Controller\Api\v3;
  5. use App\Controller\Api\Service\MaterialRequestService;
  6. use App\Entity\MaterialRequest;
  7. use App\Entity\MaterialRequestDocument;
  8. use App\Entity\ProjectOrderTaskFulfillment;
  9. use App\Enum\SeverityInterface;
  10. use App\Service\SerializeService\ItemGroupsSerialize;
  11. use App\Service\SerializeService\MaterialRequestDocumentSerialize;
  12. use App\Service\SerializeService\MaterialRequestSerialize;
  13. use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
  14. use Sensio\Bundle\FrameworkExtraBundle\Configuration\ParamConverter;
  15. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  16. use Symfony\Component\HttpFoundation\Request;
  17. use Symfony\Component\HttpFoundation\Response;
  18. use Symfony\Component\Routing\Annotation\Route;
  19. use Symfony\Contracts\Translation\TranslatorInterface;
  21. /**
  22.  * MaterialRequest — in-house (execution_scope=internal) task execution'inda responsible
  23.  * person'in actigi malzeme siparis talebi. PDF'ler sistem tarafindan PARSE EDILMEZ;
  24.  * Expenses sorumlusu her PDF'i gozle inceleyip PDF SEVIYESINDE karar verir.
  25.  *
  26.  * Yanit sozlesmesi (FE icin):
  27.  *   - upsert/submit/documentUpload/documentDelete -> "materialRequest" (tam nesne, documents dahil)
  28.  *   - documentUpload ayrica "document" (yeni eklenen PDF, tek basina) doner
  29.  *   - review -> "document" (karar verilen PDF) + "materialRequest" (turetilmis header durumu)
  30.  *   - listByExecution -> "materialRequests" (dizi)
  31.  *   - neededCollections -> duz JSON "item_groups" (tek dataset — StreamedResponse DEGIL)
  32.  *
  33.  * Payload alan adlari raw entity property adiyla birebir (alias yasak):
  34.  *   upsert: task_execution (id) · documentUpload: name, item_group (id), file · review: status, review_note
  35.  *
  36.  * 🪤 ASAGIDAKI IKI SATIRDA "@" YOK, BILEREK. Doctrine'in anotasyon okuyucusu
  37.  * docblock'taki HER "@Ad" dizisini GERCEK ANOTASYON sanar. Burada anlatim amacli
  38.  * yazilmis iki IsGranted vardi; parantezsiz olduklari icin SINIF SEVIYESINDE
  39.  * bos attribute listesiyle iki anotasyon uretiyorlardi ve bu
  40.  * controller'daki HER UC 403 donuyordu — voter'a bile ulasilmadan.
  41.  * (Gercek vaka 2026-08-20: gelen kutusu ucu ilk kez cagrildiginda ortaya cikti;
  42.  * bu controller daha once hic calistirilmamisti, o yuzden fark edilmemisti.)
  43.  * Anotasyonu metin icinde anmak gerekirse basina "@" KONMAZ.
  44.  *
  45.  * Requester tarafi (upsert/submit/document.*): IsGranted SECTION:order:task:u + BE'de
  46.  * gercek atama kontrolu (execution.branch_contact_person === oturumdaki worker).
  47.  * Reviewer tarafi (review): IsGranted MODULE:expense:u (mevcut permission deseni,
  48.  * ModulesAccessMap'te YENI key ACILMADI).
  49.  *
  50.  * @Route("/api/v3/material-request")
  51.  */
  52. class MaterialRequestController extends AbstractController
  53. {
  54.     /**
  55.      * id null -> yeni draft talep (body: task_execution). id dolu -> mevcut taslak.
  56.      *
  57.      * @Route("/upsert/{id}", name="api_v3_material_request_upsert", methods={"POST"}, defaults={"id": null})
  58.      * @ParamConverter("materialRequest", options={"mapping": {"id": "id"}})
  59.      * @IsGranted("SECTION:order:task:u")
  60.      */
  61.     public function upsert(
  62.         ?MaterialRequest $materialRequest,
  63.         Request $request,
  64.         TranslatorInterface $translator,
  65.         MaterialRequestService $service,
  66.         MaterialRequestSerialize $serialize
  67.     ): Response {
  68.         try {
  69.             $materialRequest = $service->setParams($request->request)->upsert($materialRequest);
  70.         } catch (\DomainException $e) {
  71.             return $this->json([
  72.                 'message'  => $translator->trans($e->getMessage()),
  73.                 'severity' => SeverityInterface::ERROR,
  74.             ], Response::HTTP_CONFLICT);
  75.         }
  77.         return $this->json([
  78.             'message'         => $translator->trans('Material request saved successfully'),
  79.             'severity'        => SeverityInterface::SUCCESS,
  80.             'materialRequest' => $serialize->setEntity($materialRequest)->serializeFull(),
  81.         ], Response::HTTP_OK);
  82.     }
  84.     /**
  85.      * @Route("/document/upload/{request_id}", name="api_v3_material_request_document_upload", methods={"POST"})
  86.      * @ParamConverter("materialRequest", options={"mapping": {"request_id": "id"}})
  87.      * @IsGranted("SECTION:order:task:u")
  88.      */
  89.     public function documentUpload(
  90.         ?MaterialRequest $materialRequest,
  91.         Request $request,
  92.         TranslatorInterface $translator,
  93.         MaterialRequestService $service,
  94.         MaterialRequestSerialize $serialize,
  95.         MaterialRequestDocumentSerialize $documentSerialize
  96.     ): Response {
  97.         if (!$materialRequest) {
  98.             return $this->json([
  99.                 'message'  => $translator->trans('Material request not found'),
  100.                 'severity' => SeverityInterface::ERROR,
  101.             ], Response::HTTP_NOT_FOUND);
  102.         }
  104.         try {
  105.             $document = $service
  106.                 ->setParams($request->request)
  107.                 ->setFiles($request->files)
  108.                 ->uploadDocument($materialRequest);
  109.         } catch (\DomainException $e) {
  110.             return $this->json([
  111.                 'message'  => $translator->trans($e->getMessage()),
  112.                 'severity' => SeverityInterface::ERROR,
  113.             ], Response::HTTP_UNPROCESSABLE_ENTITY);
  114.         }
  116.         return $this->json([
  117.             'message'         => $translator->trans('Document uploaded successfully'),
  118.             'severity'        => SeverityInterface::SUCCESS,
  119.             'document'        => $documentSerialize->setEntity($document)->serializeFull(),
  120.             'materialRequest' => $serialize->setEntity($document->getMaterialRequest())->serializeFull(),
  121.         ], Response::HTTP_OK);
  122.     }
  124.     /**
  125.      * @Route("/document/delete/{document_id}", name="api_v3_material_request_document_delete", methods={"POST"})
  126.      * @ParamConverter("document", options={"mapping": {"document_id": "id"}})
  127.      * @IsGranted("SECTION:order:task:u")
  128.      */
  129.     public function documentDelete(
  130.         ?MaterialRequestDocument $document,
  131.         TranslatorInterface $translator,
  132.         MaterialRequestService $service,
  133.         MaterialRequestSerialize $serialize
  134.     ): Response {
  135.         if (!$document) {
  136.             return $this->json([
  137.                 'message'  => $translator->trans('Document not found'),
  138.                 'severity' => SeverityInterface::ERROR,
  139.             ], Response::HTTP_NOT_FOUND);
  140.         }
  142.         try {
  143.             $materialRequest = $service->deleteDocument($document);
  144.         } catch (\DomainException $e) {
  145.             return $this->json([
  146.                 'message'  => $translator->trans($e->getMessage()),
  147.                 'severity' => SeverityInterface::ERROR,
  148.             ], Response::HTTP_CONFLICT);
  149.         }
  151.         return $this->json([
  152.             'message'         => $translator->trans('Document removed successfully'),
  153.             'severity'        => SeverityInterface::SUCCESS,
  154.             'materialRequest' => $serialize->setEntity($materialRequest)->serializeFull(),
  155.         ], Response::HTTP_OK);
  156.     }
  158.     /**
  159.      * draft -> submitted. En az 1 dokuman sarti (Service'te zorlanir).
  160.      *
  161.      * @Route("/submit/{id}", name="api_v3_material_request_submit", methods={"POST"})
  162.      * @ParamConverter("materialRequest", options={"mapping": {"id": "id"}})
  163.      * @IsGranted("SECTION:order:task:u")
  164.      */
  165.     public function submit(
  166.         ?MaterialRequest $materialRequest,
  167.         TranslatorInterface $translator,
  168.         MaterialRequestService $service,
  169.         MaterialRequestSerialize $serialize
  170.     ): Response {
  171.         if (!$materialRequest) {
  172.             return $this->json([
  173.                 'message'  => $translator->trans('Material request not found'),
  174.                 'severity' => SeverityInterface::ERROR,
  175.             ], Response::HTTP_NOT_FOUND);
  176.         }
  178.         try {
  179.             $materialRequest = $service->submit($materialRequest);
  180.         } catch (\DomainException $e) {
  181.             return $this->json([
  182.                 'message'  => $translator->trans($e->getMessage()),
  183.                 'severity' => SeverityInterface::ERROR,
  184.             ], Response::HTTP_UNPROCESSABLE_ENTITY);
  185.         }
  187.         return $this->json([
  188.             'message'         => $translator->trans('Material request submitted successfully'),
  189.             'severity'        => SeverityInterface::SUCCESS,
  190.             'materialRequest' => $serialize->setEntity($materialRequest)->serializeFull(),
  191.         ], Response::HTTP_OK);
  192.     }
  194.     /**
  195.      * Karar bildirimi e-postasini talep sahibine gonderir (body: language).
  196.      *
  197.      * AYRI UC, `review`'a GOMULU DEGIL: karar BELGE basina veriliyor, bildirim ise
  198.      * KAYIT BASINA tek ozet ve kullanicinin ONAYINA bagli (dili de o seciyor).
  199.      * Ikisini birlestirmek her belgede bir mail demek olurdu.
  200.      *
  201.      * @Route("/notify-decision/{request_id}", name="api_v3_material_request_notify_decision", methods={"POST"})
  202.      * @ParamConverter("materialRequest", options={"mapping": {"request_id": "id"}})
  203.      * @IsGranted("MODULE:expense:u")
  204.      */
  205.     public function notifyDecision(
  206.         ?MaterialRequest $materialRequest,
  207.         Request $request,
  208.         TranslatorInterface $translator,
  209.         MaterialRequestService $service,
  210.         MaterialRequestSerialize $serialize
  211.     ): Response {
  212.         if (!$materialRequest) {
  213.             return $this->json([
  214.                 'message'  => $translator->trans('Material request not found'),
  215.                 'severity' => SeverityInterface::ERROR,
  216.             ], Response::HTTP_NOT_FOUND);
  217.         }
  219.         try {
  220.             $materialRequest = $service->setParams($request->request)->notifyDecision($materialRequest);
  221.         } catch (\DomainException $e) {
  222.             return $this->json([
  223.                 'message'  => $translator->trans($e->getMessage()),
  224.                 'severity' => SeverityInterface::ERROR,
  225.             ], Response::HTTP_UNPROCESSABLE_ENTITY);
  226.         }
  228.         /* Gonderilmediyse (alici yok / ayar kapali) `last_decision_mail_at` NULL kalir;
  229.            FE bunu okuyup kullaniciya durumu soyleyebilsin diye kayit yine donuyor. */
  230.         return $this->json([
  231.             'message'         => $materialRequest->getLastDecisionMailAt() !== null
  232.                 ? $translator->trans('Email sent successfully')
  233.                 : $translator->trans('No recipient has email notifications enabled'),
  234.             'severity'        => $materialRequest->getLastDecisionMailAt() !== null
  235.                 ? SeverityInterface::SUCCESS
  236.                 : SeverityInterface::WARNING,
  237.             'materialRequest' => $serialize->setEntity($materialRequest)->serializeFull(),
  238.         ], Response::HTTP_OK);
  239.     }
  241.     /**
  242.      * Expenses sorumlusunun PDF-seviyesi karari (body: status + review_note).
  243.      *
  244.      * @Route("/review/{document_id}", name="api_v3_material_request_review", methods={"POST"})
  245.      * @ParamConverter("document", options={"mapping": {"document_id": "id"}})
  246.      * @IsGranted("MODULE:expense:u")
  247.      */
  248.     public function review(
  249.         ?MaterialRequestDocument $document,
  250.         Request $request,
  251.         TranslatorInterface $translator,
  252.         MaterialRequestService $service,
  253.         MaterialRequestSerialize $serialize,
  254.         MaterialRequestDocumentSerialize $documentSerialize
  255.     ): Response {
  256.         if (!$document) {
  257.             return $this->json([
  258.                 'message'  => $translator->trans('Document not found'),
  259.                 'severity' => SeverityInterface::ERROR,
  260.             ], Response::HTTP_NOT_FOUND);
  261.         }
  263.         try {
  264.             $document = $service->setParams($request->request)->review($document);
  265.         } catch (\DomainException $e) {
  266.             return $this->json([
  267.                 'message'  => $translator->trans($e->getMessage()),
  268.                 'severity' => SeverityInterface::ERROR,
  269.             ], Response::HTTP_UNPROCESSABLE_ENTITY);
  270.         }
  272.         return $this->json([
  273.             'message'         => $translator->trans('Decision saved successfully'),
  274.             'severity'        => SeverityInterface::SUCCESS,
  275.             'document'        => $documentSerialize->setEntity($document)->serializeFull(),
  276.             'materialRequest' => $serialize->setEntity($document->getMaterialRequest())->serializeFull(),
  277.         ], Response::HTTP_OK);
  278.     }
  280.     /**
  281.      * Responsible person'in kendi execution'ina acilan talepleri takip etmesi icin.
  282.      * Atama filtresi BE'de (Service::listByExecution -> assertRequesterOwnership).
  283.      *
  284.      * FE (te-frontend) bu ucu duz `HttpRequest(..., "GET")` ile cagiriyor (tek dataset,
  285.      * CLAUDE "tek dataset -> HttpRequest" kurali) -> `methods` KISITLANMAZ (GET calisir).
  286.      *
  287.      * @Route("/list-by-execution/{execution_id}", name="api_v3_material_request_list_by_execution")
  288.      * @ParamConverter("execution", options={"mapping": {"execution_id": "id"}})
  289.      * @IsGranted("SECTION:order:task:u")
  290.      */
  291.     public function listByExecution(
  292.         ?ProjectOrderTaskFulfillment $execution,
  293.         TranslatorInterface $translator,
  294.         MaterialRequestService $service,
  295.         MaterialRequestSerialize $serialize
  296.     ): Response {
  297.         if (!$execution) {
  298.             return $this->json([
  299.                 'message'  => $translator->trans('Task execution not found'),
  300.                 'severity' => SeverityInterface::ERROR,
  301.             ], Response::HTTP_NOT_FOUND);
  302.         }
  304.         try {
  305.             $materialRequests = $service->listByExecution($execution);
  306.         } catch (\DomainException $e) {
  307.             return $this->json([
  308.                 'message'  => $translator->trans($e->getMessage()),
  309.                 'severity' => SeverityInterface::ERROR,
  310.             ], Response::HTTP_CONFLICT);
  311.         }
  313.         return $this->json([
  314.             'message'          => $translator->trans('Material requests loaded'),
  315.             'severity'         => SeverityInterface::SUCCESS,
  316.             'materialRequests' => array_map(
  317.                 function (MaterialRequest $mr) use ($serialize) {
  318.                     return $serialize->setEntity($mr)->serializeFull();
  319.                 },
  320.                 $materialRequests
  321.             ),
  322.         ], Response::HTTP_OK);
  323.     }
  325.     /**
  326.      * INCELEYEN GELEN KUTUSU — karar bekleyen talepler (ExpenseV2 toolbar'indaki
  327.      * "Malzeme talepleri" butonu bunu okur).
  328.      *
  329.      * 🪤 BU UC OLMADAN AKIS `submitted`'DA OLUYORDU: gonderilen talep hicbir yere
  330.      * dusmuyor, tek okuma ucu "execution'a gore listele" idi — yani inceleyenin
  331.      * once HANGI execution oldugunu bilmesi gerekiyordu. Bilmesinin bir yolu yoktu.
  332.      *
  333.      * Tek dataset -> duz `HttpRequest` (streamed masterData DEGIL), `methods`
  334.      * kisitlanmiyor (GET calisir).
  335.      *
  336.      * @Route("/list-pending", name="api_v3_material_request_list_pending")
  337.      * @IsGranted("MODULE:expense:u")
  338.      */
  339.     public function listPending(
  340.         TranslatorInterface $translator,
  341.         MaterialRequestService $service,
  342.         MaterialRequestSerialize $serialize
  343.     ): Response {
  344.         $materialRequests = $service->listPending();
  346.         return $this->json([
  347.             'message'          => $translator->trans('Material requests loaded'),
  348.             'severity'         => SeverityInterface::SUCCESS,
  349.             'materialRequests' => array_map(
  350.                 function (MaterialRequest $mr) use ($serialize) {
  351.                     // Gelen kutusu task/order kunyesini de ister — bkz. serializeForInbox.
  352.                     return $serialize->setEntity($mr)->serializeForInbox();
  353.                 },
  354.                 $materialRequests
  355.             ),
  356.         ], Response::HTTP_OK);
  357.     }
  359.     /**
  360.      * Wizard'in ihtiyac duydugu tek koleksiyon: item_groups (kategori secimi).
  361.      *
  362.      * ⚠️ TEK dataset -> CLAUDE.md "tek dataset -> HttpRequest (normal JSON)" kurali:
  363.      * StreamedResponse DEGIL, duz Response. FE (te-frontend) bu ucu `HttpRequest(...,
  364.      * "GET")` ile cagirip `data.item_groups` okuyor — StreamedResponse (SSE metni) FE'de
  365.      * parse edilemezdi. Rol model: TaskExecutionController::neededCollections 3 koleksiyon
  366.      * bundle ettigi icin StreamedResponse'du; burada tek koleksiyon oldugu icin farkli.
  367.      *
  368.      * @Route("/needed-collections", name="api_v3_material_request_needed_collections")
  369.      * @IsGranted("SECTION:order:task:u")
  370.      */
  371.     public function neededCollections(
  372.         MaterialRequestService $service,
  373.         TranslatorInterface $translator,
  374.         ItemGroupsSerialize $itemGroupsSerialize
  375.     ): Response {
  376.         return $this->json([
  377.             'message'     => $translator->trans('Item groups loaded'),
  378.             'severity'    => SeverityInterface::SUCCESS,
  379.             'item_groups' => $itemGroupsSerialize->setEntity($service->fetchAllItemGroups())->serializeFull(),
  380.         ], Response::HTTP_OK);
  381.     }
  382. }