Simon
45fd930f76
- NasFileManager.php - filesystem helper (browse, upload, download, delete, rename, mkdir) - project-files.php API - CRUD operace nad soubory projektu - ProjectFileManager.jsx - React komponenta v detailu projektu - Automaticke vytvoreni slozky pri vytvoreni projektu (rucne i z objednavky) - Prejmenovani slozky pri zmene nazvu projektu - Checkbox "Smazat i soubory na disku" pri mazani projektu/objednavky - Path traversal ochrana, MIME validace, blocklist nebezpecnych typu - Bily spinner v primary tlacitkach, ConfirmModal message jako div - Case-insensitive rename fix pro Windows filesystem Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
120 lines
4.1 KiB
PHP
120 lines
4.1 KiB
PHP
<?php
|
|
|
|
/**
|
|
* BOHA Automation - Projects API
|
|
*
|
|
* GET /api/admin/projects.php - List projects
|
|
* GET /api/admin/projects.php?action=detail&id=X - Get project detail
|
|
* GET /api/admin/projects.php?action=notes&id=X - Get project notes
|
|
* GET /api/admin/projects.php?action=next_number - Get next available project number
|
|
* POST /api/admin/projects.php - Create new project (manual)
|
|
* POST /api/admin/projects.php?action=add_note&id=X - Add note to project
|
|
* PUT /api/admin/projects.php?id=X - Update project
|
|
* DELETE /api/admin/projects.php?action=delete_note¬eId=X - Delete note (admin)
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
require_once dirname(__DIR__) . '/config.php';
|
|
require_once dirname(__DIR__) . '/includes/JWTAuth.php';
|
|
require_once dirname(__DIR__) . '/includes/AuditLog.php';
|
|
require_once dirname(__DIR__) . '/includes/PaginationHelper.php';
|
|
require_once dirname(__DIR__) . '/includes/NasFileManager.php';
|
|
require_once __DIR__ . '/handlers/projects-handlers.php';
|
|
|
|
setCorsHeaders();
|
|
setSecurityHeaders();
|
|
setNoCacheHeaders();
|
|
header('Content-Type: application/json; charset=utf-8');
|
|
|
|
$authData = JWTAuth::requireAuth();
|
|
AuditLog::setUser($authData['user_id'], $authData['user']['username'] ?? 'unknown');
|
|
|
|
$method = $_SERVER['REQUEST_METHOD'];
|
|
$action = $_GET['action'] ?? '';
|
|
$id = isset($_GET['id']) ? (int) $_GET['id'] : null;
|
|
|
|
try {
|
|
$pdo = db();
|
|
|
|
switch ($method) {
|
|
case 'GET':
|
|
requirePermission($authData, 'projects.view');
|
|
switch ($action) {
|
|
case 'detail':
|
|
if (!$id) {
|
|
errorResponse('ID projektu je povinné');
|
|
}
|
|
handleGetDetail($pdo, $id);
|
|
break;
|
|
case 'notes':
|
|
if (!$id) {
|
|
errorResponse('ID projektu je povinné');
|
|
}
|
|
handleGetNotes($pdo, $id);
|
|
break;
|
|
case 'next_number':
|
|
requirePermission($authData, 'projects.create');
|
|
handleGetNextNumber($pdo);
|
|
break;
|
|
case 'users':
|
|
handleGetUsers($pdo);
|
|
break;
|
|
default:
|
|
handleGetList($pdo);
|
|
}
|
|
break;
|
|
|
|
case 'POST':
|
|
if ($action === 'add_note') {
|
|
requirePermission($authData, 'projects.view');
|
|
if (!$id) {
|
|
errorResponse('ID projektu je povinné');
|
|
}
|
|
handleAddNote($pdo, $id, $authData);
|
|
} elseif (!$action) {
|
|
requirePermission($authData, 'projects.create');
|
|
handleCreateProject($pdo);
|
|
} else {
|
|
errorResponse('Neznámá akce', 400);
|
|
}
|
|
break;
|
|
|
|
case 'PUT':
|
|
requirePermission($authData, 'projects.edit');
|
|
if (!$id) {
|
|
errorResponse('ID projektu je povinné');
|
|
}
|
|
handleUpdateProject($pdo, $id);
|
|
break;
|
|
|
|
case 'DELETE':
|
|
if ($action === 'delete_note') {
|
|
requirePermission($authData, 'projects.edit');
|
|
$noteId = isset($_GET['noteId']) ? (int) $_GET['noteId'] : null;
|
|
if (!$noteId) {
|
|
errorResponse('ID poznámky je povinné');
|
|
}
|
|
handleDeleteNote($pdo, $noteId, $authData);
|
|
} elseif (!$action && $id) {
|
|
requirePermission($authData, 'projects.delete');
|
|
handleDeleteProject($pdo, $id);
|
|
} else {
|
|
errorResponse('Neznámá akce', 400);
|
|
}
|
|
break;
|
|
|
|
default:
|
|
errorResponse('Metoda není povolena', 405);
|
|
}
|
|
} catch (PDOException $e) {
|
|
error_log('Projects API error: ' . $e->getMessage());
|
|
if (DEBUG_MODE) {
|
|
errorResponse('Chyba databáze: ' . $e->getMessage(), 500);
|
|
} else {
|
|
errorResponse('Chyba databáze', 500);
|
|
}
|
|
}
|
|
|
|
// --- Number generation ---
|