initial commit
This commit is contained in:
437
app/Http/Controllers/WarningController.php
Normal file
437
app/Http/Controllers/WarningController.php
Normal file
@@ -0,0 +1,437 @@
|
||||
<?php
|
||||
|
||||
namespace App\Http\Controllers;
|
||||
|
||||
use App\Models\Employee;
|
||||
use App\Models\User as UserModel;
|
||||
use App\Models\Warning;
|
||||
use App\Models\User;
|
||||
use Illuminate\Http\Request;
|
||||
use Illuminate\Support\Facades\Auth;
|
||||
use Illuminate\Support\Facades\Storage;
|
||||
use Illuminate\Support\Facades\Validator;
|
||||
use Inertia\Inertia;
|
||||
|
||||
class WarningController extends Controller
|
||||
{
|
||||
|
||||
public function index(Request $request)
|
||||
{
|
||||
if (Auth::user()->can('manage-warnings')) {
|
||||
$query = Warning::with(['employee', 'issuer', 'approver'])->where(function ($q) {
|
||||
if (Auth::user()->can('manage-any-warnings')) {
|
||||
$q->whereIn('created_by', getCompanyAndUsersId());
|
||||
} elseif (Auth::user()->can('manage-own-warnings')) {
|
||||
$q->where('created_by', Auth::id())->orWhere('employee_id', Auth::id());
|
||||
} else {
|
||||
$q->whereRaw('1 = 0');
|
||||
}
|
||||
});
|
||||
|
||||
// Handle search
|
||||
if ($request->has('search') && !empty($request->search)) {
|
||||
$query->whereHas('employee', function ($q) use ($request) {
|
||||
$q->where('name', 'like', '%' . $request->search . '%')
|
||||
->orWhere('employee_id', 'like', '%' . $request->search . '%');
|
||||
})
|
||||
->orWhere('subject', 'like', '%' . $request->search . '%')
|
||||
->orWhere('description', 'like', '%' . $request->search . '%');
|
||||
}
|
||||
|
||||
// Handle employee filter
|
||||
if ($request->has('employee_id') && !empty($request->employee_id)) {
|
||||
$query->where('employee_id', $request->employee_id);
|
||||
}
|
||||
|
||||
// Handle warning type filter
|
||||
if ($request->has('warning_type') && !empty($request->warning_type)) {
|
||||
$query->where('warning_type', $request->warning_type);
|
||||
}
|
||||
|
||||
// Handle severity filter
|
||||
if ($request->has('severity') && !empty($request->severity)) {
|
||||
$query->where('severity', $request->severity);
|
||||
}
|
||||
|
||||
// Handle status filter
|
||||
if ($request->has('status') && !empty($request->status) && $request->status !== 'all') {
|
||||
$query->where('status', $request->status);
|
||||
}
|
||||
|
||||
// Handle date range filter
|
||||
if ($request->has('date_from') && !empty($request->date_from)) {
|
||||
$query->whereDate('warning_date', '>=', $request->date_from);
|
||||
}
|
||||
if ($request->has('date_to') && !empty($request->date_to)) {
|
||||
$query->whereDate('warning_date', '<=', $request->date_to);
|
||||
}
|
||||
|
||||
// Handle sorting
|
||||
$sortField = $request->get('sort_field', 'created_at');
|
||||
$sortDirection = $request->get('sort_direction', 'desc');
|
||||
|
||||
// Validate sort field
|
||||
$allowedSortFields = ['warning_date', 'created_at', 'id'];
|
||||
if (!in_array($sortField, $allowedSortFields)) {
|
||||
$sortField = 'created_at';
|
||||
}
|
||||
|
||||
$query->orderBy($sortField, $sortDirection);
|
||||
|
||||
$warnings = $query->paginate($request->per_page ?? 10);
|
||||
|
||||
$warnings->getCollection()->transform(function ($warning) {
|
||||
if ($warning->employee) {
|
||||
$rawAvatar = $warning->employee->getRawOriginal('avatar');
|
||||
$warning->employee->avatar = check_file($rawAvatar)
|
||||
? get_file($rawAvatar)
|
||||
: get_file('avatars/avatar.png');
|
||||
}
|
||||
return $warning;
|
||||
});
|
||||
|
||||
// Get managers for issuer dropdown
|
||||
$managers = User::whereIn('created_by', getCompanyAndUsersId())
|
||||
->whereHas('roles', function ($q) {
|
||||
$q->where('name', 'like', '%Manager%')
|
||||
->orWhere('name', 'like', '%HR%');
|
||||
})
|
||||
->select('id', 'name')
|
||||
->get();
|
||||
|
||||
|
||||
// Get warning types for filter dropdown
|
||||
$warningTypes = Warning::whereIn('created_by', getCompanyAndUsersId())
|
||||
->select('warning_type')
|
||||
->distinct()
|
||||
->pluck('warning_type')
|
||||
->toArray();
|
||||
|
||||
return Inertia::render('hr/warnings/index', [
|
||||
'warnings' => $warnings,
|
||||
'employees' => $this->getFilteredEmployees(),
|
||||
'managers' => $managers,
|
||||
'warningTypes' => $warningTypes,
|
||||
'filters' => $request->all(['search', 'employee_id', 'warning_type', 'severity', 'status', 'date_from', 'date_to', 'sort_field', 'sort_direction', 'per_page']),
|
||||
]);
|
||||
} else {
|
||||
return redirect()->back()->with('error', __('Permission Denied.'));
|
||||
}
|
||||
}
|
||||
|
||||
private function getFilteredEmployees()
|
||||
{
|
||||
// Get employees for filter dropdown (compatible with getFilteredEmployees logic)
|
||||
$employeeQuery = Employee::whereIn('created_by', getCompanyAndUsersId());
|
||||
|
||||
if (Auth::user()->can('manage-own-warnings') && !Auth::user()->can('manage-any-warnings')) {
|
||||
$employeeQuery->where(function ($q) {
|
||||
$q->where('created_by', Auth::id())->orWhere('user_id', Auth::id());
|
||||
});
|
||||
}
|
||||
|
||||
$employees = User::emp()
|
||||
->with('employee')
|
||||
->whereIn('created_by', getCompanyAndUsersId())
|
||||
->where('status', 'active')
|
||||
->whereIn('id', $employeeQuery->pluck('user_id'))
|
||||
->select('id', 'name')
|
||||
->get()
|
||||
->map(function ($user) {
|
||||
return [
|
||||
'id' => $user->id,
|
||||
'name' => $user->name,
|
||||
'employee_id' => $user->employee->employee_id ?? ''
|
||||
];
|
||||
});
|
||||
return $employees;
|
||||
}
|
||||
|
||||
/**
|
||||
* Store a newly created resource in storage.
|
||||
*/
|
||||
public function store(Request $request)
|
||||
{
|
||||
if (Auth::user()->can('create-warnings')) {
|
||||
$validator = Validator::make($request->all(), [
|
||||
'employee_id' => 'required|exists:users,id',
|
||||
'warning_by' => 'required|exists:users,id',
|
||||
'warning_type' => 'required|string|max:255',
|
||||
'subject' => 'required|string|max:255',
|
||||
'severity' => 'required|string|in:verbal,written,final',
|
||||
'warning_date' => 'required|date',
|
||||
'description' => 'nullable|string',
|
||||
'documents' => 'nullable|string',
|
||||
'expiry_date' => 'nullable|date|after:warning_date',
|
||||
'has_improvement_plan' => 'nullable|boolean',
|
||||
'improvement_plan_goals' => 'nullable|string|required_if:has_improvement_plan,true',
|
||||
'improvement_plan_start_date' => 'nullable|date|required_if:has_improvement_plan,true',
|
||||
'improvement_plan_end_date' => 'nullable|date|after:improvement_plan_start_date|required_if:has_improvement_plan,true',
|
||||
]);
|
||||
|
||||
if ($validator->fails()) {
|
||||
return redirect()->back()->withErrors($validator)->withInput();
|
||||
}
|
||||
|
||||
// Check if employee belongs to current company
|
||||
$user = UserModel::where('id', $request->employee_id)
|
||||
->where('type', 'employee')
|
||||
->whereIn('created_by', getCompanyAndUsersId())
|
||||
->first();
|
||||
if (!$user) {
|
||||
return redirect()->back()->with('error', __('Invalid employee selected'));
|
||||
}
|
||||
|
||||
// Check if warning issuer belongs to current company
|
||||
$issuer = User::find($request->warning_by);
|
||||
if (!$issuer || (!in_array($issuer->created_by, getCompanyAndUsersId()) && !in_array($issuer->id, getCompanyAndUsersId()))) {
|
||||
return redirect()->back()->with('error', __('Invalid warning issuer selected'));
|
||||
}
|
||||
|
||||
$warningData = [
|
||||
'employee_id' => $request->employee_id,
|
||||
'warning_by' => $request->warning_by,
|
||||
'warning_type' => $request->warning_type,
|
||||
'subject' => $request->subject,
|
||||
'severity' => $request->severity,
|
||||
'warning_date' => $request->warning_date,
|
||||
'description' => $request->description,
|
||||
'status' => 'draft',
|
||||
'expiry_date' => $request->expiry_date,
|
||||
'has_improvement_plan' => $request->has_improvement_plan ?? false,
|
||||
'improvement_plan_goals' => $request->improvement_plan_goals,
|
||||
'improvement_plan_start_date' => $request->improvement_plan_start_date,
|
||||
'improvement_plan_end_date' => $request->improvement_plan_end_date,
|
||||
'created_by' => creatorId(),
|
||||
];
|
||||
|
||||
// Handle document from media library
|
||||
if ($request->has('documents')) {
|
||||
$warningData['documents'] = $request->documents;
|
||||
}
|
||||
|
||||
Warning::create($warningData);
|
||||
|
||||
return redirect()->back()->with('success', __('Warning created successfully'));
|
||||
} else {
|
||||
return redirect()->back()->with('error', __('Permission Denied.'));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Update the specified resource in storage.
|
||||
*/
|
||||
public function update(Request $request, Warning $warning)
|
||||
{
|
||||
if (Auth::user()->can('edit-warnings')) {
|
||||
// Check if warning belongs to current company
|
||||
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
||||
return redirect()->back()->with('error', 'You do not have permission to update this warning');
|
||||
}
|
||||
|
||||
$validator = Validator::make($request->all(), [
|
||||
'employee_id' => 'required|exists:users,id',
|
||||
'warning_by' => 'required|exists:users,id',
|
||||
'warning_type' => 'required|string|max:255',
|
||||
'subject' => 'required|string|max:255',
|
||||
'severity' => 'required|string|in:verbal,written,final',
|
||||
'warning_date' => 'required|date',
|
||||
'description' => 'nullable|string',
|
||||
'status' => 'nullable|string|in:draft,issued,acknowledged,expired',
|
||||
'documents' => 'nullable|string',
|
||||
'acknowledgment_date' => 'nullable|date|after_or_equal:warning_date',
|
||||
'employee_response' => 'nullable|string',
|
||||
'expiry_date' => 'nullable|date|after:warning_date',
|
||||
'has_improvement_plan' => 'nullable|boolean',
|
||||
'improvement_plan_goals' => 'nullable|string|required_if:has_improvement_plan,true',
|
||||
'improvement_plan_start_date' => 'nullable|date|required_if:has_improvement_plan,true',
|
||||
'improvement_plan_end_date' => 'nullable|date|after:improvement_plan_start_date|required_if:has_improvement_plan,true',
|
||||
'improvement_plan_progress' => 'nullable|string',
|
||||
]);
|
||||
|
||||
if ($validator->fails()) {
|
||||
return redirect()->back()->withErrors($validator)->withInput();
|
||||
}
|
||||
|
||||
// Check if employee belongs to current company
|
||||
$user = UserModel::where('id', $request->employee_id)
|
||||
->where('type', 'employee')
|
||||
->whereIn('created_by', getCompanyAndUsersId())
|
||||
->first();
|
||||
if (!$user) {
|
||||
return redirect()->back()->with('error', 'Invalid employee selected');
|
||||
}
|
||||
|
||||
// Check if warning issuer belongs to current company
|
||||
$issuer = User::find($request->warning_by);
|
||||
if (!$issuer || (!in_array($issuer->created_by, getCompanyAndUsersId()) && !in_array($issuer->id, getCompanyAndUsersId()))) {
|
||||
return redirect()->back()->with('error', 'Invalid warning issuer selected');
|
||||
}
|
||||
|
||||
$warningData = [
|
||||
'employee_id' => $request->employee_id,
|
||||
'warning_by' => $request->warning_by,
|
||||
'warning_type' => $request->warning_type,
|
||||
'subject' => $request->subject,
|
||||
'severity' => $request->severity,
|
||||
'warning_date' => $request->warning_date,
|
||||
'description' => $request->description,
|
||||
'acknowledgment_date' => $request->acknowledgment_date,
|
||||
'employee_response' => $request->employee_response,
|
||||
'expiry_date' => $request->expiry_date,
|
||||
'has_improvement_plan' => $request->has_improvement_plan ?? false,
|
||||
'improvement_plan_goals' => $request->improvement_plan_goals,
|
||||
'improvement_plan_start_date' => $request->improvement_plan_start_date,
|
||||
'improvement_plan_end_date' => $request->improvement_plan_end_date,
|
||||
'improvement_plan_progress' => $request->improvement_plan_progress,
|
||||
];
|
||||
|
||||
// Update status if provided and different from current
|
||||
if ($request->has('status') && $request->status !== $warning->status) {
|
||||
$warningData['status'] = $request->status;
|
||||
|
||||
// If status is being set to issued, acknowledged, or expired, set approved_by and approved_at
|
||||
if (in_array($request->status, ['issued', 'acknowledged', 'expired']) && !$warning->approved_by) {
|
||||
$warningData['approved_by'] = auth()->id();
|
||||
$warningData['approved_at'] = now();
|
||||
}
|
||||
}
|
||||
|
||||
// Handle document from media library
|
||||
if ($request->has('documents')) {
|
||||
$warningData['documents'] = $request->documents;
|
||||
}
|
||||
|
||||
$warning->update($warningData);
|
||||
|
||||
return redirect()->back()->with('success', __('Warning updated successfully'));
|
||||
} else {
|
||||
return redirect()->back()->with('error', __('Permission Denied.'));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Remove the specified resource from storage.
|
||||
*/
|
||||
public function destroy(Warning $warning)
|
||||
{
|
||||
if (Auth::user()->can('delete-warnings')) {
|
||||
// Check if warning belongs to current company
|
||||
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
||||
return redirect()->back()->with('error', __('You do not have permission to delete this warning'));
|
||||
}
|
||||
$warning->delete();
|
||||
|
||||
return redirect()->back()->with('success', __('Warning deleted successfully'));
|
||||
} else {
|
||||
return redirect()->back()->with('error', __('Permission Denied.'));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Change the status of the warning.
|
||||
*/
|
||||
public function changeStatus(Request $request, Warning $warning)
|
||||
{
|
||||
if (Auth::user()->can('approve-warnings') || Auth::user()->can('acknowledge-warnings') || Auth::user()->can('edit-warnings')) {
|
||||
// Check if warning belongs to current company
|
||||
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
||||
return redirect()->back()->with('error', __('You do not have permission to update this warning'));
|
||||
}
|
||||
|
||||
$validator = Validator::make($request->all(), [
|
||||
'status' => 'required|string|in:draft,issued,acknowledged,expired',
|
||||
'acknowledgment_date' => 'nullable|date|required_if:status,acknowledged',
|
||||
'employee_response' => 'nullable|string',
|
||||
]);
|
||||
|
||||
if ($validator->fails()) {
|
||||
return redirect()->back()->withErrors($validator)->withInput();
|
||||
}
|
||||
|
||||
$updateData = [
|
||||
'status' => $request->status,
|
||||
'acknowledgment_date' => $request->acknowledgment_date,
|
||||
'employee_response' => $request->employee_response,
|
||||
];
|
||||
|
||||
// If status is being set to issued, acknowledged, or expired, set approved_by and approved_at
|
||||
if (in_array($request->status, ['issued', 'acknowledged', 'expired']) && !$warning->approved_by) {
|
||||
$updateData['approved_by'] = auth()->id();
|
||||
$updateData['approved_at'] = now();
|
||||
}
|
||||
|
||||
$warning->update($updateData);
|
||||
|
||||
return redirect()->back()->with('success', __('Warning status updated successfully'));
|
||||
} else {
|
||||
return redirect()->back()->with('error', __('Permission Denied.'));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Update the improvement plan for a warning.
|
||||
*/
|
||||
public function updateImprovementPlan(Request $request, Warning $warning)
|
||||
{
|
||||
if (Auth::user()->can('edit-warnings')) {
|
||||
// Check if warning belongs to current company
|
||||
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
||||
return redirect()->back()->with('error', __('You do not have permission to update this warning'));
|
||||
}
|
||||
|
||||
$validator = Validator::make($request->all(), [
|
||||
'has_improvement_plan' => 'required|boolean',
|
||||
'improvement_plan_goals' => 'nullable|string|required_if:has_improvement_plan,true',
|
||||
'improvement_plan_start_date' => 'nullable|date|required_if:has_improvement_plan,true',
|
||||
'improvement_plan_end_date' => 'nullable|date|after:improvement_plan_start_date|required_if:has_improvement_plan,true',
|
||||
'improvement_plan_progress' => 'nullable|string',
|
||||
]);
|
||||
|
||||
if ($validator->fails()) {
|
||||
return redirect()->back()->withErrors($validator)->withInput();
|
||||
}
|
||||
|
||||
$updateData = [
|
||||
'has_improvement_plan' => $request->has_improvement_plan,
|
||||
'improvement_plan_goals' => $request->improvement_plan_goals,
|
||||
'improvement_plan_start_date' => $request->improvement_plan_start_date,
|
||||
'improvement_plan_end_date' => $request->improvement_plan_end_date,
|
||||
'improvement_plan_progress' => $request->improvement_plan_progress,
|
||||
];
|
||||
|
||||
$warning->update($updateData);
|
||||
|
||||
return redirect()->back()->with('success', __('Improvement plan updated successfully'));
|
||||
} else {
|
||||
return redirect()->back()->with('error', __('Permission Denied.'));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Download document file.
|
||||
*/
|
||||
public function downloadDocument(Warning $warning)
|
||||
{
|
||||
if (Auth::user()->can('view-warnings')) {
|
||||
// Check if warning belongs to current company
|
||||
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
||||
return redirect()->back()->with('error', __('You do not have permission to access this document'));
|
||||
}
|
||||
|
||||
if (!$warning->documents) {
|
||||
return redirect()->back()->with('error', __('Document file not found'));
|
||||
}
|
||||
|
||||
$filePath = getStorageFilePath($warning->documents);
|
||||
|
||||
if (!file_exists($filePath)) {
|
||||
return redirect()->back()->with('error', __('Document file not found'));
|
||||
}
|
||||
|
||||
return response()->download($filePath);
|
||||
} else {
|
||||
return redirect()->back()->with('error', __('Permission Denied.'));
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user