Subversion Repositories SmartDukaan

-- Migration: grant fofo-role access to the partner-margin-by-IMEI lookup endpoint.
-- The endpoint already exists in code (SchemeController.getImeiNetMarginModal),
-- but it's missing from the dtr.api / dtr.role_api access tables, so users hit
-- it through the auth interceptor without permission. This migration registers
-- the endpoint and copies the same role grants that already exist for '/order'
-- (the URI that renders the orders page where the View Margin button lives).

-- Step 1: register the endpoint in the api table.
INSERT INTO api (name, uri, method, create_timestamp, update_timestamp)
SELECT 'getImeiNetMarginModal', '/getImeiNetMarginModal', 'GET', NOW(), NOW()
WHERE NOT EXISTS (SELECT 1 FROM api WHERE uri = '/getImeiNetMarginModal' AND method = 'GET');

-- Step 2: grant role_api to the same roles that currently access '/order'.
-- The View Margin button is rendered on the orders page; whoever can see that
-- page should be able to invoke this lookup.
INSERT INTO role_api (role_id, api_id)
SELECT ra.role_id, new_api.id
FROM role_api ra
         JOIN api old_api ON old_api.id = ra.api_id AND old_api.uri = '/order'
         JOIN api new_api ON new_api.uri = '/getImeiNetMarginModal'
WHERE NOT EXISTS (SELECT 1 FROM role_api ra2
                  WHERE ra2.role_id = ra.role_id AND ra2.api_id = new_api.id);