make secure-id of receipt readable for owners

pluf · Feb 5, 2020 · e19271d · e19271d
1 parent 4908c01
commit e19271d
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/src/Bank/Service.php b/src/Bank/Service.php
@@ -86,6 +86,7 @@ public static function create($param, $owner = null, $ownerId = null)
         $engine = $backend->get_engine();
         $engine->create($receipt);
         $receipt->update();
+        $receipt->_a['cols']['secure_id']['readable'] = true;
         return $receipt;
     }
 

diff --git a/src/Bank/Views/Receipt.php b/src/Bank/Views/Receipt.php
@@ -34,7 +34,12 @@ class Bank_Views_Receipt
      */
     public function find($request, $match)
     {
-        $pag = new Pluf_Paginator(new Bank_Receipt());
+        $receipt = new Bank_Receipt();
+        if(User_Precondition::isOwner($request)){
+            // Make secure-id as readable for owners.
+            $receipt->_a['cols']['secure_id']['readable'] = true;
+        }
+        $pag = new Pluf_Paginator($receipt);
         $pag->configure(array(), array( // search
             'title',
             'description'
@@ -73,6 +78,9 @@ public function create($request, $match)
     public function get($request, $match)
     {
         $receipt = Bank_Shortcuts_GetReceiptOr404($match['id']);
+        if(User_Precondition::isOwner($request)){
+            $receipt->_a['cols']['secure_id']['readable'] = true;
+        }
         return $receipt;
     }
 
@@ -88,6 +96,7 @@ public function getBySecureId($request, $match)
             $match['secure_id']
         ));
         $receipt = $receipt->getOne($sql->gen());
+        $receipt->_a['cols']['secure_id']['readable'] = true;
         return $receipt;
     }
 
@@ -119,6 +128,7 @@ public function updateBySecureId($request, $match)
         if ($engine->update($receipt)) {
             $receipt->update();
         }
+        $receipt->_a['cols']['secure_id']['readable'] = true;
         return $receipt;
     }