From be8dcbc0707044cf128e0eb3aa063746baa32142 Mon Sep 17 00:00:00 2001
From: Kenneth Trecy Tobias <19201.tobias.kennethtrecy.c@gmail.com>
Date: Sun, 11 Sep 2022 22:08:01 +0800
Subject: [PATCH] intrn(employee schedule): enhance the policy to create
 schedule

---
 routes/api/employee_schedule/create.post.ts      | 12 ++++++++++--
 routes/api/employee_schedule/update(id).patch.ts |  2 +-
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/routes/api/employee_schedule/create.post.ts b/routes/api/employee_schedule/create.post.ts
index e922f68db..a00826e1e 100644
--- a/routes/api/employee_schedule/create.post.ts
+++ b/routes/api/employee_schedule/create.post.ts
@@ -1,4 +1,4 @@
-import type { FieldRules, Rules } from "!/types/validation"
+import type { FieldRules } from "!/types/validation"
 import type { BaseManagerClass } from "!/types/independent"
 import type { AuthenticatedIDRequest, Response } from "!/types/dependent"
 import type { EmployeeScheduleDocument } from "$/types/documents/employee_schedule"
@@ -8,6 +8,7 @@ import { DayValues } from "$/types/database"
 import Log from "$!/singletons/log"
 import UserManager from "%/managers/user"
 import JSONController from "!/controllers/json"
+import Merger from "!/middlewares/miscellaneous/merger"
 import CreatedResponseInfo from "!/response_infos/created"
 import EmployeeScheduleManager from "%/managers/employee_schedule"
 import convertTimeToMinutes from "$/object/convert_time_to_minutes"
@@ -37,7 +38,14 @@ export default class extends JSONController {
 	get filePath(): string { return __filename }
 
 	get policy(): Policy {
-		return CommonMiddlewareList.employeeSchedulePolicy
+		return new Merger([
+			CommonMiddlewareList.reachableEmployeeOnlyPolicy,
+			new PermissionBasedPolicy(permissionGroup, [
+				UPDATE_OWN_DATA,
+				UPDATE_ANYONE_ON_OWN_DEPARTMENT,
+				UPDATE_ANYONE_ON_ALL_DEPARTMENTS
+			])
+		]) as unknown as Policy
 	}
 
 	makeBodyRuleGenerator(unusedRequest: AuthenticatedIDRequest): FieldRules {
diff --git a/routes/api/employee_schedule/update(id).patch.ts b/routes/api/employee_schedule/update(id).patch.ts
index d0763d200..852cbd828 100644
--- a/routes/api/employee_schedule/update(id).patch.ts
+++ b/routes/api/employee_schedule/update(id).patch.ts
@@ -7,6 +7,7 @@ import { DayValues } from "$/types/database"
 
 import Log from "$!/singletons/log"
 import UserManager from "%/managers/user"
+import Merger from "!/middlewares/miscellaneous/merger"
 import NoContentResponseInfo from "!/response_infos/no_content"
 import EmployeeScheduleManager from "%/managers/employee_schedule"
 import convertTimeToMinutes from "$/object/convert_time_to_minutes"
@@ -29,7 +30,6 @@ import exists from "!/validators/manager/exists"
 import required from "!/validators/base/required"
 import range from "!/validators/comparison/range"
 import oneOf from "!/validators/comparison/one-of"
-import Merger from "!/middlewares/miscellaneous/merger"
 import makeRelationshipRules from "!/rule_sets/make_relationships"
 import makeResourceDocumentRules from "!/rule_sets/make_resource_document"
 import uniqueEmployeeSchedule from "!/validators/date/unique_employee_schedule"