WebSVN – SmartDukaan – Diff – //trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/controller/LmsLeadController.java

 import com.spice.profitmandi.dao.repository.dtr.LeadLiveLocationRepository;
 import com.spice.profitmandi.dao.entity.cs.Position;
 import com.spice.profitmandi.dao.entity.cs.Region;
 import com.spice.profitmandi.dao.enumuration.cs.EscalationType;
 import com.spice.profitmandi.dao.repository.cs.PositionRepository;
+import com.spice.profitmandi.dao.repository.dtr.RoleRepository;
+import com.spice.profitmandi.dao.entity.dtr.Role;
+import com.spice.profitmandi.service.authentication.RoleManager;
 import com.spice.profitmandi.dao.repository.cs.RegionRepository;
 import com.spice.profitmandi.dao.entity.user.LeadCallAnswer;
 import com.spice.profitmandi.dao.entity.user.LeadCallQuestion;
 import com.spice.profitmandi.dao.repository.dtr.LeadCallChecklistRepository;
 import com.spice.profitmandi.dao.repository.dtr.LeadRepository;
     @Autowired
     private LmsAssignmentService lmsAssignmentService;
     @Autowired
+    private RoleManager roleManager;
+    @Autowired
+    private RoleRepository roleRepository;
+    @Autowired
     private CookiesProcessor cookiesProcessor;
     @Autowired
     private ResponseSender<?> responseSender;
+     *
      * <p>{@code regionId} does not filter the list — it marks who covers that region, so an agent can
      * see the right owner first without being prevented from picking someone else. A lead in a
      * region with no active owner still has to go to somebody.
      */
+    /**
+     * Assign or change the BM/RSM who owns a region. Writes the region's Sales L4 position in
+     * {@code cs.position} -- the row the assignment engine reads first (L4 before L5 before L3) --
+     * so the routing table, the Create-Lead preview and every future lead pick the new owner at
+     * once. An existing L4 row is re-pointed (the region keeps one owner), otherwise one is created.
+     * Leads already assigned are untouched; re-route those with {@code /lms/assignLead}.
+     *
+     * <p>Allowed for FOFO admins, the "Sales Admin" role, and anyone holding a Sales position at L5
+     * or above (a sales head). A BM cannot hand a region to themselves.
+     */
+    @RequestMapping(value = "/lms/region-owner", method = RequestMethod.POST)
+    @ResponseBody
+    public ResponseEntity<?> setRegionOwner(HttpServletRequest request,
+                                            @RequestParam(name = "regionId") int regionId,
+                                            @RequestParam(name = "authId") int authId) {
+        AuthUser me = currentUser(request);
+        if (me == null) {
+            return ResponseEntity.status(HttpStatus.UNAUTHORIZED).build();
+        }
+        if (!canManageRegionOwners(request, me)) {
+            return ResponseEntity.status(HttpStatus.FORBIDDEN)
+                    .body("Only an admin, a Sales Admin or a sales head (L5+) can change a region's owner");
+        }
+        Region region = regionRepository.selectById(regionId);
+        if (region == null) {
+            return responseSender.notFound("Region not found");
+        }
+        AuthUser owner = authRepository.selectById(authId);
+        if (owner == null || !Boolean.TRUE.equals(owner.isActive())) {
+            return responseSender.badRequest("That person is not an active user");
+        }
+        List<Position> l4 = positionRepository.selectPositionbyCategoryIdAndEscalationType(
+                SALES_CATEGORY, EscalationType.L4, regionId);
+        Position target = (l4 == null || l4.isEmpty()) ? null : l4.get(0);
+        AuthUser previous = null;
+        if (target != null) {
+            if (target.getAuthUserId() == authId) {
+                return responseSender.badRequest(owner.getFullName() + " already owns this region");
+            }
+            previous = authRepository.selectById(target.getAuthUserId());
+            target.setAuthUserId(authId);
+        } else {
+            target = new Position();
+            target.setAuthUserId(authId);
+            target.setCategoryId(SALES_CATEGORY);
+            target.setEscalationType(EscalationType.L4);
+            target.setRegionId(regionId);
+            target.setCreateTimestamp(LocalDateTime.now());
+            target.setTicketAssignee(false);
+        }
+        positionRepository.persist(target);
+        // Report what the engine now resolves for the region, not just what was written.
+        LmsAssignmentService.Assignment now = lmsAssignmentService.resolve(regionId);
+        LOGGER.info("LMS region {} ({}) owner set to auth {} by auth {}{}", regionId, now.regionCode, authId,
+                me.getId(), previous != null ? " (was " + previous.getId() + ")" : " (new L4 position)");
+        Map<String, Object> res = new LinkedHashMap<>();
+        res.put("ok", true);
+        res.put("regionId", regionId);
+        res.put("regionCode", now.regionCode);
+        res.put("bmName", now.bm != null ? now.bm.getFullName() : null);
+        res.put("assignmentStatus", now.assignmentStatus);
+        res.put("previous", previous != null ? previous.getFullName() : null);
+        res.put("created", previous == null);
+        return responseSender.ok(res);
+    }
+    /**
+     * Who may create leads from the LMS dashboard: FOFO admins, or anyone holding a position (any
+     * category) at L2 or above. Mirrors the {@code canCreateLead} flag that hides the tab.
+     */
+    private boolean canCreateLeads(HttpServletRequest request, AuthUser me) {
+        try {
+            LoginDetails login = cookiesProcessor.getCookiesObject(request);
+            if (login != null && login.getRoleIds() != null && roleManager.isAdmin(login.getRoleIds())) {
+                return true;
+            }
+        } catch (Exception e) {
+            LOGGER.warn("Could not read roles for auth {}", me.getId(), e);
+        }
+        List<Position> held = positionRepository.selectPositionByAuthId(me.getId());
+        if (held != null) {
+            for (Position p : held) {
+                if (p.getEscalationType() != null && p.getEscalationType().ordinal() >= EscalationType.L2.ordinal()) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+    /** FOFO admin, the "Sales Admin" role, or a Sales position at L5 or above. */
+    private boolean canManageRegionOwners(HttpServletRequest request, AuthUser me) {
+        try {
+            LoginDetails login = cookiesProcessor.getCookiesObject(request);
+            Set<Integer> roleIds = login != null && login.getRoleIds() != null ? login.getRoleIds() : new HashSet<>();
+            if (roleManager.isAdmin(roleIds)) {
+                return true;
+            }
+            if (!roleIds.isEmpty()) {
+                for (Role r : roleRepository.selectByIds(roleIds)) {
+                    if (r.getName() != null && "Sales Admin".equalsIgnoreCase(r.getName().trim())) {
+                        return true;
+                    }
+                }
+            }
+        } catch (Exception e) {
+            LOGGER.warn("Could not read roles for auth {}", me.getId(), e);
+        }
+        List<Position> held = positionRepository.selectPositionByAuthId(me.getId());
+        if (held != null) {
+            for (Position p : held) {
+                if (p.getCategoryId() == SALES_CATEGORY && p.getEscalationType() != null
+                        && p.getEscalationType().ordinal() >= EscalationType.L5.ordinal()) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
     @RequestMapping(value = "/lms/salespeople", method = RequestMethod.GET)
     @ResponseBody
     public ResponseEntity<?> salespeople(@RequestParam(name = "regionId", required = false) Integer regionId) {
         List<Position> positions = positionRepository.selectPositionByCategoryId(SALES_CATEGORY);
         if (positions == null) {
         AuthUser me = currentUser(request);
         if (me == null) {
             return ResponseEntity.status(HttpStatus.UNAUTHORIZED).build();
+        }
+        if (!canCreateLeads(request, me)) {
+            return ResponseEntity.status(HttpStatus.FORBIDDEN)
+                    .body("Creating leads here needs a position at L2 or above");
+        }
         Lead lead = new Lead();
         // Split on the last space so "Jitu Katara" keeps a surname; user.lead.last_name is NOT NULL.
         int space = name.lastIndexOf(' ');
         lead.setFirstName(space > 0 ? name.substring(0, space) : name);

Subversion Repositories SmartDukaan

(root)//trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/controller/LmsLeadController.java – Rev 37749 → 37760