251123:2300 Update T1

backend/src/modules/project/project.controller.ts

@@ -1,4 +1,75 @@
-import { Controller } from '@nestjs/common';
+import {
+  Controller,
+  Get,
+  Post,
+  Body,
+  Patch,
+  Param,
+  Delete,
+  Query,
+  UseGuards,
+  ParseIntPipe,
+} from '@nestjs/common';
+import { ApiTags, ApiOperation, ApiBearerAuth } from '@nestjs/swagger';
 
-@Controller('project')
-export class ProjectController {}
+import { ProjectService } from './project.service.js';
+import { CreateProjectDto } from './dto/create-project.dto.js';
+import { UpdateProjectDto } from './dto/update-project.dto.js';
+import { SearchProjectDto } from './dto/search-project.dto.js';
+
+import { JwtAuthGuard } from '../../common/guards/jwt-auth.guard.js';
+import { RbacGuard } from '../../common/guards/rbac.guard.js';
+import { RequirePermission } from '../../common/decorators/require-permission.decorator.js';
+
+@ApiTags('Projects')
+@ApiBearerAuth()
+@UseGuards(JwtAuthGuard, RbacGuard)
+@Controller('projects') // แนะนำให้ใช้ plural noun (projects)
+export class ProjectController {
+  constructor(private readonly projectService: ProjectService) {}
+
+  @Post()
+  @ApiOperation({ summary: 'Create new Project' })
+  @RequirePermission('project.create')
+  create(@Body() createDto: CreateProjectDto) {
+    return this.projectService.create(createDto);
+  }
+
+  @Get()
+  @ApiOperation({ summary: 'Search Projects' })
+  @RequirePermission('project.view')
+  findAll(@Query() searchDto: SearchProjectDto) {
+    return this.projectService.findAll(searchDto);
+  }
+
+  @Get('organizations')
+  @ApiOperation({ summary: 'List All Organizations (Master Data)' })
+  // @RequirePermission('organization.view') // หรือเปิดให้ดูได้ทั่วไปถ้าจำเป็น
+  findAllOrgs() {
+    return this.projectService.findAllOrganizations();
+  }
+
+  @Get(':id')
+  @ApiOperation({ summary: 'Get Project Details' })
+  @RequirePermission('project.view')
+  findOne(@Param('id', ParseIntPipe) id: number) {
+    return this.projectService.findOne(id);
+  }
+
+  @Patch(':id')
+  @ApiOperation({ summary: 'Update Project' })
+  @RequirePermission('project.edit')
+  update(
+    @Param('id', ParseIntPipe) id: number,
+    @Body() updateDto: UpdateProjectDto,
+  ) {
+    return this.projectService.update(id, updateDto);
+  }
+
+  @Delete(':id')
+  @ApiOperation({ summary: 'Delete Project (Soft Delete)' })
+  @RequirePermission('project.delete')
+  remove(@Param('id', ParseIntPipe) id: number) {
+    return this.projectService.remove(id);
+  }
+}