Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
package pkg
import (
"context"
"errors"
2023-02-03 11:30:56 +00:00
"github.com/julienschmidt/httprouter"
2023-02-01 13:15:02 +00:00
"html/template"
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
"net/http"
"net/url"
2023-01-28 13:18:58 +00:00
"strconv"
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
)
const (
ContextCompanyKey = "numerus-company"
)
type Company struct {
Id int
Slug string
}
2023-02-03 11:30:56 +00:00
func CompanyHandler ( next http . Handler ) httprouter . Handle {
return func ( w http . ResponseWriter , r * http . Request , params httprouter . Params ) {
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
company := & Company {
2023-02-03 11:30:56 +00:00
Slug : params [ 0 ] . Value ,
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
}
2023-02-03 11:30:56 +00:00
conn := getConn ( r )
err := conn . QueryRow ( r . Context ( ) , "select company_id from company where slug = $1" , company . Slug ) . Scan ( & company . Id )
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
if err != nil {
http . NotFound ( w , r )
return
}
ctx := context . WithValue ( r . Context ( ) , ContextCompanyKey , company )
r = r . WithContext ( ctx )
2023-02-03 11:30:56 +00:00
r2 := new ( http . Request )
* r2 = * r
r2 . URL = new ( url . URL )
* r2 . URL = * r . URL
r2 . URL . Path = params [ 1 ] . Value
next . ServeHTTP ( w , r2 )
}
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
}
func getCompany ( r * http . Request ) * Company {
company := r . Context ( ) . Value ( ContextCompanyKey )
if company == nil {
return nil
}
return company . ( * Company )
}
2023-01-28 11:24:52 +00:00
type CurrencyOption struct {
Code string
Symbol string
}
2023-01-27 20:30:14 +00:00
type CountryOption struct {
Code string
Name string
}
2023-01-28 13:18:58 +00:00
type Tax struct {
Id int
Name string
Rate int
}
2023-02-01 13:15:02 +00:00
type taxDetailsForm struct {
2023-02-01 13:34:40 +00:00
* contactForm
Currency * SelectField
2023-02-01 13:15:02 +00:00
}
func newTaxDetailsForm ( ctx context . Context , conn * Conn , locale * Locale ) * taxDetailsForm {
return & taxDetailsForm {
2023-02-01 13:34:40 +00:00
contactForm : newContactForm ( ctx , conn , locale ) ,
2023-02-01 13:15:02 +00:00
Currency : & SelectField {
Name : "currency" ,
Label : pgettext ( "input" , "Currency" , locale ) ,
Options : MustGetOptions ( ctx , conn , "select currency_code, currency_symbol from currency order by currency_code" ) ,
Selected : "EUR" ,
} ,
}
}
func ( form * taxDetailsForm ) Parse ( r * http . Request ) error {
2023-02-01 13:34:40 +00:00
if err := form . contactForm . Parse ( r ) ; err != nil {
2023-02-01 13:15:02 +00:00
return err
}
form . Currency . FillValue ( r )
return nil
}
func ( form * taxDetailsForm ) Validate ( ctx context . Context , conn * Conn ) bool {
validator := newFormValidator ( )
validator . CheckValidSelectOption ( form . Currency , gettext ( "Selected currency is not valid." , form . locale ) )
2023-02-01 13:34:40 +00:00
return form . contactForm . Validate ( ctx , conn ) && validator . AllOK ( )
2023-02-01 13:15:02 +00:00
}
func ( form * taxDetailsForm ) mustFillFromDatabase ( ctx context . Context , conn * Conn , company * Company ) * taxDetailsForm {
err := conn . QueryRow ( ctx , "select business_name, substr(vatin::text, 3), trade_name, phone, email, web, address, city, province, postal_code, country_code, currency_code from company where company_id = $1" , company . Id ) . Scan ( form . BusinessName , form . VATIN , form . TradeName , form . Phone , form . Email , form . Web , form . Address , form . City , form . Province , form . PostalCode , form . Country , form . Currency )
if err != nil {
panic ( err )
}
return form
}
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
type TaxDetailsPage struct {
2023-02-01 13:15:02 +00:00
DetailsForm * taxDetailsForm
2023-02-03 11:30:56 +00:00
NewTaxForm * taxForm
2023-02-01 13:15:02 +00:00
Taxes [ ] * Tax
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
}
2023-02-03 11:30:56 +00:00
func GetCompanyTaxDetailsForm ( w http . ResponseWriter , r * http . Request , _ httprouter . Params ) {
mustRenderTaxDetailsForm ( w , r , newTaxDetailsFormFromDatabase ( r ) )
}
func newTaxDetailsFormFromDatabase ( r * http . Request ) * taxDetailsForm {
locale := getLocale ( r )
conn := getConn ( r )
form := newTaxDetailsForm ( r . Context ( ) , conn , locale )
company := mustGetCompany ( r )
form . mustFillFromDatabase ( r . Context ( ) , conn , company )
return form
}
func HandleCompanyTaxDetailsForm ( w http . ResponseWriter , r * http . Request , _ httprouter . Params ) {
locale := getLocale ( r )
conn := getConn ( r )
form := newTaxDetailsForm ( r . Context ( ) , conn , locale )
if err := form . Parse ( r ) ; err != nil {
http . Error ( w , err . Error ( ) , http . StatusBadRequest )
return
}
if err := verifyCsrfTokenValid ( r ) ; err != nil {
http . Error ( w , err . Error ( ) , http . StatusForbidden )
return
}
if ok := form . Validate ( r . Context ( ) , conn ) ; ! ok {
w . WriteHeader ( http . StatusUnprocessableEntity )
mustRenderTaxDetailsForm ( w , r , form )
return
}
company := mustGetCompany ( r )
conn . MustExec ( r . Context ( ) , "update company set business_name = $1, vatin = ($11 || $2)::vatin, trade_name = $3, phone = parse_packed_phone_number($4, $11), email = $5, web = $6, address = $7, city = $8, province = $9, postal_code = $10, country_code = $11, currency_code = $12 where company_id = $13" , form . BusinessName , form . VATIN , form . TradeName , form . Phone , form . Email , form . Web , form . Address , form . City , form . Province , form . PostalCode , form . Country , form . Currency , company . Id )
2023-02-04 09:43:42 +00:00
http . Redirect ( w , r , companyURI ( company , "/tax-details" ) , http . StatusSeeOther )
2023-02-03 11:30:56 +00:00
return
}
func mustRenderTaxDetailsForm ( w http . ResponseWriter , r * http . Request , form * taxDetailsForm ) {
locale := getLocale ( r )
page := & TaxDetailsPage {
DetailsForm : form ,
NewTaxForm : newTaxForm ( locale ) ,
}
mustRenderTexDetailsPage ( w , r , page )
}
func mustRenderTaxForm ( w http . ResponseWriter , r * http . Request , form * taxForm ) {
page := & TaxDetailsPage {
DetailsForm : newTaxDetailsFormFromDatabase ( r ) ,
NewTaxForm : form ,
}
mustRenderTexDetailsPage ( w , r , page )
}
func mustRenderTexDetailsPage ( w http . ResponseWriter , r * http . Request , page * TaxDetailsPage ) {
conn := getConn ( r )
company := mustGetCompany ( r )
page . Taxes = mustGetTaxes ( r . Context ( ) , conn , company )
mustRenderAppTemplate ( w , r , "tax-details.gohtml" , page )
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
}
func mustGetCompany ( r * http . Request ) * Company {
company := getCompany ( r )
if company == nil {
panic ( errors . New ( "company: required but not found" ) )
}
2023-01-27 00:08:03 +00:00
return company
Add the company relation and read-only form to edit
I do not have more time to update the update to the company today, but i
believe this is already a good amount of work for a commit.
The company is going to be used for row level security, as users will
only have access to the data from companies they are granted access, by
virtue of being in the company_user relation.
I did not know how add a row level security policy to the company_user
because i needed the to select on the same relation and this is not
allowed, because it would create an infinite loop.
Had to add the vat, pg_libphonenumber, and uri extensions in order to
validate VAT identification numbers, phone numbers, and URIs,
repectively. These libraries are not in Debian, but i created packages
for them all in https://dev.tandem.ws/tandem.
2023-01-24 20:46:07 +00:00
}
2023-01-27 20:30:14 +00:00
2023-02-01 13:15:02 +00:00
func mustGetTaxes ( ctx context . Context , conn * Conn , company * Company ) [ ] * Tax {
rows , err := conn . Query ( ctx , "select tax_id, name, (rate * 100)::integer from tax where company_id = $1 order by rate, name" , company . Id )
2023-01-27 20:30:14 +00:00
if err != nil {
panic ( err )
}
defer rows . Close ( )
2023-02-01 13:15:02 +00:00
var taxes [ ] * Tax
2023-01-27 20:30:14 +00:00
for rows . Next ( ) {
2023-02-01 13:15:02 +00:00
tax := & Tax { }
err = rows . Scan ( & tax . Id , & tax . Name , & tax . Rate )
2023-01-27 20:30:14 +00:00
if err != nil {
panic ( err )
}
2023-02-01 13:15:02 +00:00
taxes = append ( taxes , tax )
2023-01-27 20:30:14 +00:00
}
if rows . Err ( ) != nil {
panic ( rows . Err ( ) )
}
2023-02-01 13:15:02 +00:00
return taxes
2023-01-27 20:30:14 +00:00
}
2023-01-28 11:24:52 +00:00
2023-02-03 11:30:56 +00:00
type taxForm struct {
2023-02-01 13:15:02 +00:00
locale * Locale
Name * InputField
Rate * InputField
}
2023-01-28 11:24:52 +00:00
2023-02-03 11:30:56 +00:00
func newTaxForm ( locale * Locale ) * taxForm {
return & taxForm {
2023-02-01 13:15:02 +00:00
locale : locale ,
Name : & InputField {
Name : "tax_name" ,
Label : pgettext ( "input" , "Tax name" , locale ) ,
Type : "text" ,
Required : true ,
} ,
Rate : & InputField {
Name : "tax_rate" ,
Label : pgettext ( "input" , "Rate (%)" , locale ) ,
Type : "number" ,
Required : true ,
Attributes : [ ] template . HTMLAttr {
"min=-99" ,
"max=99" ,
} ,
} ,
2023-01-28 11:24:52 +00:00
}
}
2023-01-28 13:18:58 +00:00
2023-02-03 11:30:56 +00:00
func ( form * taxForm ) Parse ( r * http . Request ) error {
2023-02-01 13:15:02 +00:00
if err := r . ParseForm ( ) ; err != nil {
return err
2023-01-28 13:18:58 +00:00
}
2023-02-01 13:15:02 +00:00
form . Name . FillValue ( r )
form . Rate . FillValue ( r )
return nil
}
2023-01-28 13:18:58 +00:00
2023-02-03 11:30:56 +00:00
func ( form * taxForm ) Validate ( ) bool {
2023-02-01 13:15:02 +00:00
validator := newFormValidator ( )
validator . CheckRequiredInput ( form . Name , gettext ( "Tax name can not be empty." , form . locale ) )
if validator . CheckRequiredInput ( form . Rate , gettext ( "Tax rate can not be empty." , form . locale ) ) {
validator . CheckValidInteger ( form . Rate , - 99 , 99 , gettext ( "Tax rate must be an integer between -99 and 99." , form . locale ) )
2023-01-28 13:18:58 +00:00
}
2023-02-01 13:15:02 +00:00
return validator . AllOK ( )
2023-01-28 13:18:58 +00:00
}
2023-02-03 11:30:56 +00:00
func HandleDeleteCompanyTax ( w http . ResponseWriter , r * http . Request , params httprouter . Params ) {
taxId , err := strconv . Atoi ( params [ 0 ] . Value )
if err != nil {
http . NotFound ( w , r )
return
}
if err := verifyCsrfTokenValid ( r ) ; err != nil {
http . Error ( w , err . Error ( ) , http . StatusForbidden )
return
}
conn := getConn ( r )
conn . MustExec ( r . Context ( ) , "delete from tax where tax_id = $1" , taxId )
2023-02-04 09:43:42 +00:00
http . Redirect ( w , r , companyURI ( mustGetCompany ( r ) , "/tax-details" ) , http . StatusSeeOther )
2023-02-03 11:30:56 +00:00
}
func HandleAddCompanyTax ( w http . ResponseWriter , r * http . Request , _ httprouter . Params ) {
locale := getLocale ( r )
form := newTaxForm ( locale )
if err := form . Parse ( r ) ; err != nil {
http . Error ( w , err . Error ( ) , http . StatusBadRequest )
return
}
if err := verifyCsrfTokenValid ( r ) ; err != nil {
http . Error ( w , err . Error ( ) , http . StatusForbidden )
return
}
if ! form . Validate ( ) {
w . WriteHeader ( http . StatusUnprocessableEntity )
mustRenderTaxForm ( w , r , form )
return
}
conn := getConn ( r )
company := mustGetCompany ( r )
conn . MustExec ( r . Context ( ) , "insert into tax (company_id, name, rate) values ($1, $2, $3 / 100::decimal)" , company . Id , form . Name , form . Rate . Integer ( ) )
2023-02-04 09:43:42 +00:00
http . Redirect ( w , r , companyURI ( company , "/tax-details" ) , http . StatusSeeOther )
2023-01-28 13:18:58 +00:00
}