438 lines
19 KiB
PHP
438 lines
19 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Models\Employee;
|
|
use App\Models\User as UserModel;
|
|
use App\Models\Warning;
|
|
use App\Models\User;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use Illuminate\Support\Facades\Validator;
|
|
use Inertia\Inertia;
|
|
|
|
class WarningController extends Controller
|
|
{
|
|
|
|
public function index(Request $request)
|
|
{
|
|
if (Auth::user()->can('manage-warnings')) {
|
|
$query = Warning::with(['employee', 'issuer', 'approver'])->where(function ($q) {
|
|
if (Auth::user()->can('manage-any-warnings')) {
|
|
$q->whereIn('created_by', getCompanyAndUsersId());
|
|
} elseif (Auth::user()->can('manage-own-warnings')) {
|
|
$q->where('created_by', Auth::id())->orWhere('employee_id', Auth::id());
|
|
} else {
|
|
$q->whereRaw('1 = 0');
|
|
}
|
|
});
|
|
|
|
// Handle search
|
|
if ($request->has('search') && !empty($request->search)) {
|
|
$query->whereHas('employee', function ($q) use ($request) {
|
|
$q->where('name', 'like', '%' . $request->search . '%')
|
|
->orWhere('employee_id', 'like', '%' . $request->search . '%');
|
|
})
|
|
->orWhere('subject', 'like', '%' . $request->search . '%')
|
|
->orWhere('description', 'like', '%' . $request->search . '%');
|
|
}
|
|
|
|
// Handle employee filter
|
|
if ($request->has('employee_id') && !empty($request->employee_id)) {
|
|
$query->where('employee_id', $request->employee_id);
|
|
}
|
|
|
|
// Handle warning type filter
|
|
if ($request->has('warning_type') && !empty($request->warning_type)) {
|
|
$query->where('warning_type', $request->warning_type);
|
|
}
|
|
|
|
// Handle severity filter
|
|
if ($request->has('severity') && !empty($request->severity)) {
|
|
$query->where('severity', $request->severity);
|
|
}
|
|
|
|
// Handle status filter
|
|
if ($request->has('status') && !empty($request->status) && $request->status !== 'all') {
|
|
$query->where('status', $request->status);
|
|
}
|
|
|
|
// Handle date range filter
|
|
if ($request->has('date_from') && !empty($request->date_from)) {
|
|
$query->whereDate('warning_date', '>=', $request->date_from);
|
|
}
|
|
if ($request->has('date_to') && !empty($request->date_to)) {
|
|
$query->whereDate('warning_date', '<=', $request->date_to);
|
|
}
|
|
|
|
// Handle sorting
|
|
$sortField = $request->get('sort_field', 'created_at');
|
|
$sortDirection = $request->get('sort_direction', 'desc');
|
|
|
|
// Validate sort field
|
|
$allowedSortFields = ['warning_date', 'created_at', 'id'];
|
|
if (!in_array($sortField, $allowedSortFields)) {
|
|
$sortField = 'created_at';
|
|
}
|
|
|
|
$query->orderBy($sortField, $sortDirection);
|
|
|
|
$warnings = $query->paginate($request->per_page ?? 10);
|
|
|
|
$warnings->getCollection()->transform(function ($warning) {
|
|
if ($warning->employee) {
|
|
$rawAvatar = $warning->employee->getRawOriginal('avatar');
|
|
$warning->employee->avatar = check_file($rawAvatar)
|
|
? get_file($rawAvatar)
|
|
: get_file('avatars/avatar.png');
|
|
}
|
|
return $warning;
|
|
});
|
|
|
|
// Get managers for issuer dropdown
|
|
$managers = User::whereIn('created_by', getCompanyAndUsersId())
|
|
->whereHas('roles', function ($q) {
|
|
$q->where('name', 'like', '%Manager%')
|
|
->orWhere('name', 'like', '%HR%');
|
|
})
|
|
->select('id', 'name')
|
|
->get();
|
|
|
|
|
|
// Get warning types for filter dropdown
|
|
$warningTypes = Warning::whereIn('created_by', getCompanyAndUsersId())
|
|
->select('warning_type')
|
|
->distinct()
|
|
->pluck('warning_type')
|
|
->toArray();
|
|
|
|
return Inertia::render('hr/warnings/index', [
|
|
'warnings' => $warnings,
|
|
'employees' => $this->getFilteredEmployees(),
|
|
'managers' => $managers,
|
|
'warningTypes' => $warningTypes,
|
|
'filters' => $request->all(['search', 'employee_id', 'warning_type', 'severity', 'status', 'date_from', 'date_to', 'sort_field', 'sort_direction', 'per_page']),
|
|
]);
|
|
} else {
|
|
return redirect()->back()->with('error', __('Permission Denied.'));
|
|
}
|
|
}
|
|
|
|
private function getFilteredEmployees()
|
|
{
|
|
// Get employees for filter dropdown (compatible with getFilteredEmployees logic)
|
|
$employeeQuery = Employee::whereIn('created_by', getCompanyAndUsersId());
|
|
|
|
if (Auth::user()->can('manage-own-warnings') && !Auth::user()->can('manage-any-warnings')) {
|
|
$employeeQuery->where(function ($q) {
|
|
$q->where('created_by', Auth::id())->orWhere('user_id', Auth::id());
|
|
});
|
|
}
|
|
|
|
$employees = User::emp()
|
|
->with('employee')
|
|
->whereIn('created_by', getCompanyAndUsersId())
|
|
->where('status', 'active')
|
|
->whereIn('id', $employeeQuery->pluck('user_id'))
|
|
->select('id', 'name')
|
|
->get()
|
|
->map(function ($user) {
|
|
return [
|
|
'id' => $user->id,
|
|
'name' => $user->name,
|
|
'employee_id' => $user->employee->employee_id ?? ''
|
|
];
|
|
});
|
|
return $employees;
|
|
}
|
|
|
|
/**
|
|
* Store a newly created resource in storage.
|
|
*/
|
|
public function store(Request $request)
|
|
{
|
|
if (Auth::user()->can('create-warnings')) {
|
|
$validator = Validator::make($request->all(), [
|
|
'employee_id' => 'required|exists:users,id',
|
|
'warning_by' => 'required|exists:users,id',
|
|
'warning_type' => 'required|string|max:255',
|
|
'subject' => 'required|string|max:255',
|
|
'severity' => 'required|string|in:verbal,written,final',
|
|
'warning_date' => 'required|date',
|
|
'description' => 'nullable|string',
|
|
'documents' => 'nullable|string',
|
|
'expiry_date' => 'nullable|date|after:warning_date',
|
|
'has_improvement_plan' => 'nullable|boolean',
|
|
'improvement_plan_goals' => 'nullable|string|required_if:has_improvement_plan,true',
|
|
'improvement_plan_start_date' => 'nullable|date|required_if:has_improvement_plan,true',
|
|
'improvement_plan_end_date' => 'nullable|date|after:improvement_plan_start_date|required_if:has_improvement_plan,true',
|
|
]);
|
|
|
|
if ($validator->fails()) {
|
|
return redirect()->back()->withErrors($validator)->withInput();
|
|
}
|
|
|
|
// Check if employee belongs to current company
|
|
$user = UserModel::where('id', $request->employee_id)
|
|
->where('type', 'employee')
|
|
->whereIn('created_by', getCompanyAndUsersId())
|
|
->first();
|
|
if (!$user) {
|
|
return redirect()->back()->with('error', __('Invalid employee selected'));
|
|
}
|
|
|
|
// Check if warning issuer belongs to current company
|
|
$issuer = User::find($request->warning_by);
|
|
if (!$issuer || (!in_array($issuer->created_by, getCompanyAndUsersId()) && !in_array($issuer->id, getCompanyAndUsersId()))) {
|
|
return redirect()->back()->with('error', __('Invalid warning issuer selected'));
|
|
}
|
|
|
|
$warningData = [
|
|
'employee_id' => $request->employee_id,
|
|
'warning_by' => $request->warning_by,
|
|
'warning_type' => $request->warning_type,
|
|
'subject' => $request->subject,
|
|
'severity' => $request->severity,
|
|
'warning_date' => $request->warning_date,
|
|
'description' => $request->description,
|
|
'status' => 'draft',
|
|
'expiry_date' => $request->expiry_date,
|
|
'has_improvement_plan' => $request->has_improvement_plan ?? false,
|
|
'improvement_plan_goals' => $request->improvement_plan_goals,
|
|
'improvement_plan_start_date' => $request->improvement_plan_start_date,
|
|
'improvement_plan_end_date' => $request->improvement_plan_end_date,
|
|
'created_by' => creatorId(),
|
|
];
|
|
|
|
// Handle document from media library
|
|
if ($request->has('documents')) {
|
|
$warningData['documents'] = $request->documents;
|
|
}
|
|
|
|
Warning::create($warningData);
|
|
|
|
return redirect()->back()->with('success', __('Warning created successfully'));
|
|
} else {
|
|
return redirect()->back()->with('error', __('Permission Denied.'));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Update the specified resource in storage.
|
|
*/
|
|
public function update(Request $request, Warning $warning)
|
|
{
|
|
if (Auth::user()->can('edit-warnings')) {
|
|
// Check if warning belongs to current company
|
|
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
|
return redirect()->back()->with('error', 'You do not have permission to update this warning');
|
|
}
|
|
|
|
$validator = Validator::make($request->all(), [
|
|
'employee_id' => 'required|exists:users,id',
|
|
'warning_by' => 'required|exists:users,id',
|
|
'warning_type' => 'required|string|max:255',
|
|
'subject' => 'required|string|max:255',
|
|
'severity' => 'required|string|in:verbal,written,final',
|
|
'warning_date' => 'required|date',
|
|
'description' => 'nullable|string',
|
|
'status' => 'nullable|string|in:draft,issued,acknowledged,expired',
|
|
'documents' => 'nullable|string',
|
|
'acknowledgment_date' => 'nullable|date|after_or_equal:warning_date',
|
|
'employee_response' => 'nullable|string',
|
|
'expiry_date' => 'nullable|date|after:warning_date',
|
|
'has_improvement_plan' => 'nullable|boolean',
|
|
'improvement_plan_goals' => 'nullable|string|required_if:has_improvement_plan,true',
|
|
'improvement_plan_start_date' => 'nullable|date|required_if:has_improvement_plan,true',
|
|
'improvement_plan_end_date' => 'nullable|date|after:improvement_plan_start_date|required_if:has_improvement_plan,true',
|
|
'improvement_plan_progress' => 'nullable|string',
|
|
]);
|
|
|
|
if ($validator->fails()) {
|
|
return redirect()->back()->withErrors($validator)->withInput();
|
|
}
|
|
|
|
// Check if employee belongs to current company
|
|
$user = UserModel::where('id', $request->employee_id)
|
|
->where('type', 'employee')
|
|
->whereIn('created_by', getCompanyAndUsersId())
|
|
->first();
|
|
if (!$user) {
|
|
return redirect()->back()->with('error', 'Invalid employee selected');
|
|
}
|
|
|
|
// Check if warning issuer belongs to current company
|
|
$issuer = User::find($request->warning_by);
|
|
if (!$issuer || (!in_array($issuer->created_by, getCompanyAndUsersId()) && !in_array($issuer->id, getCompanyAndUsersId()))) {
|
|
return redirect()->back()->with('error', 'Invalid warning issuer selected');
|
|
}
|
|
|
|
$warningData = [
|
|
'employee_id' => $request->employee_id,
|
|
'warning_by' => $request->warning_by,
|
|
'warning_type' => $request->warning_type,
|
|
'subject' => $request->subject,
|
|
'severity' => $request->severity,
|
|
'warning_date' => $request->warning_date,
|
|
'description' => $request->description,
|
|
'acknowledgment_date' => $request->acknowledgment_date,
|
|
'employee_response' => $request->employee_response,
|
|
'expiry_date' => $request->expiry_date,
|
|
'has_improvement_plan' => $request->has_improvement_plan ?? false,
|
|
'improvement_plan_goals' => $request->improvement_plan_goals,
|
|
'improvement_plan_start_date' => $request->improvement_plan_start_date,
|
|
'improvement_plan_end_date' => $request->improvement_plan_end_date,
|
|
'improvement_plan_progress' => $request->improvement_plan_progress,
|
|
];
|
|
|
|
// Update status if provided and different from current
|
|
if ($request->has('status') && $request->status !== $warning->status) {
|
|
$warningData['status'] = $request->status;
|
|
|
|
// If status is being set to issued, acknowledged, or expired, set approved_by and approved_at
|
|
if (in_array($request->status, ['issued', 'acknowledged', 'expired']) && !$warning->approved_by) {
|
|
$warningData['approved_by'] = auth()->id();
|
|
$warningData['approved_at'] = now();
|
|
}
|
|
}
|
|
|
|
// Handle document from media library
|
|
if ($request->has('documents')) {
|
|
$warningData['documents'] = $request->documents;
|
|
}
|
|
|
|
$warning->update($warningData);
|
|
|
|
return redirect()->back()->with('success', __('Warning updated successfully'));
|
|
} else {
|
|
return redirect()->back()->with('error', __('Permission Denied.'));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Remove the specified resource from storage.
|
|
*/
|
|
public function destroy(Warning $warning)
|
|
{
|
|
if (Auth::user()->can('delete-warnings')) {
|
|
// Check if warning belongs to current company
|
|
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
|
return redirect()->back()->with('error', __('You do not have permission to delete this warning'));
|
|
}
|
|
$warning->delete();
|
|
|
|
return redirect()->back()->with('success', __('Warning deleted successfully'));
|
|
} else {
|
|
return redirect()->back()->with('error', __('Permission Denied.'));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Change the status of the warning.
|
|
*/
|
|
public function changeStatus(Request $request, Warning $warning)
|
|
{
|
|
if (Auth::user()->can('approve-warnings') || Auth::user()->can('acknowledge-warnings') || Auth::user()->can('edit-warnings')) {
|
|
// Check if warning belongs to current company
|
|
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
|
return redirect()->back()->with('error', __('You do not have permission to update this warning'));
|
|
}
|
|
|
|
$validator = Validator::make($request->all(), [
|
|
'status' => 'required|string|in:draft,issued,acknowledged,expired',
|
|
'acknowledgment_date' => 'nullable|date|required_if:status,acknowledged',
|
|
'employee_response' => 'nullable|string',
|
|
]);
|
|
|
|
if ($validator->fails()) {
|
|
return redirect()->back()->withErrors($validator)->withInput();
|
|
}
|
|
|
|
$updateData = [
|
|
'status' => $request->status,
|
|
'acknowledgment_date' => $request->acknowledgment_date,
|
|
'employee_response' => $request->employee_response,
|
|
];
|
|
|
|
// If status is being set to issued, acknowledged, or expired, set approved_by and approved_at
|
|
if (in_array($request->status, ['issued', 'acknowledged', 'expired']) && !$warning->approved_by) {
|
|
$updateData['approved_by'] = auth()->id();
|
|
$updateData['approved_at'] = now();
|
|
}
|
|
|
|
$warning->update($updateData);
|
|
|
|
return redirect()->back()->with('success', __('Warning status updated successfully'));
|
|
} else {
|
|
return redirect()->back()->with('error', __('Permission Denied.'));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Update the improvement plan for a warning.
|
|
*/
|
|
public function updateImprovementPlan(Request $request, Warning $warning)
|
|
{
|
|
if (Auth::user()->can('edit-warnings')) {
|
|
// Check if warning belongs to current company
|
|
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
|
return redirect()->back()->with('error', __('You do not have permission to update this warning'));
|
|
}
|
|
|
|
$validator = Validator::make($request->all(), [
|
|
'has_improvement_plan' => 'required|boolean',
|
|
'improvement_plan_goals' => 'nullable|string|required_if:has_improvement_plan,true',
|
|
'improvement_plan_start_date' => 'nullable|date|required_if:has_improvement_plan,true',
|
|
'improvement_plan_end_date' => 'nullable|date|after:improvement_plan_start_date|required_if:has_improvement_plan,true',
|
|
'improvement_plan_progress' => 'nullable|string',
|
|
]);
|
|
|
|
if ($validator->fails()) {
|
|
return redirect()->back()->withErrors($validator)->withInput();
|
|
}
|
|
|
|
$updateData = [
|
|
'has_improvement_plan' => $request->has_improvement_plan,
|
|
'improvement_plan_goals' => $request->improvement_plan_goals,
|
|
'improvement_plan_start_date' => $request->improvement_plan_start_date,
|
|
'improvement_plan_end_date' => $request->improvement_plan_end_date,
|
|
'improvement_plan_progress' => $request->improvement_plan_progress,
|
|
];
|
|
|
|
$warning->update($updateData);
|
|
|
|
return redirect()->back()->with('success', __('Improvement plan updated successfully'));
|
|
} else {
|
|
return redirect()->back()->with('error', __('Permission Denied.'));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Download document file.
|
|
*/
|
|
public function downloadDocument(Warning $warning)
|
|
{
|
|
if (Auth::user()->can('view-warnings')) {
|
|
// Check if warning belongs to current company
|
|
if (!in_array($warning->created_by, getCompanyAndUsersId())) {
|
|
return redirect()->back()->with('error', __('You do not have permission to access this document'));
|
|
}
|
|
|
|
if (!$warning->documents) {
|
|
return redirect()->back()->with('error', __('Document file not found'));
|
|
}
|
|
|
|
$filePath = getStorageFilePath($warning->documents);
|
|
|
|
if (!file_exists($filePath)) {
|
|
return redirect()->back()->with('error', __('Document file not found'));
|
|
}
|
|
|
|
return response()->download($filePath);
|
|
} else {
|
|
return redirect()->back()->with('error', __('Permission Denied.'));
|
|
}
|
|
}
|
|
}
|