salix/modules/claim/back/methods/claim/updateClaim.js

const UserError = require('vn-loopback/util/user-error');
module.exports = Self => {
    Self.remoteMethodCtx('updateClaim', {
        description: 'Update a claim with privileges',
        accessType: 'WRITE',
        accepts: [{
            arg: 'id',
            type: 'number',
            required: true,
            description: 'Claim id',
            http: {source: 'path'}
        }, {
            arg: 'data',
            type: 'object',
            required: true,
            description: 'Data to update on the model',
            http: {source: 'body'}
        }],
        returns: {
            type: 'object',
            root: true
        },
        http: {
            path: `/:id/updateClaim`,
            verb: 'post'
        }
    });

    Self.updateClaim = async(ctx, id, data) => {
        const models = Self.app.models;
        const userId = ctx.req.accessToken.userId;

        const $t = ctx.req.__; // $translate
        const claim = await models.Claim.findById(id, {
            include: {
                relation: 'client',
                scope: {
                    include: {
                        relation: 'salesPerson'
                    }
                }
            }
        });

        const canUpdate = await canChangeState(ctx, claim.claimStateFk);
        const hasRights = await canChangeState(ctx, data.claimStateFk);
        const isSalesAssistant = await models.Account.hasRole(userId, 'salesAssistant');
        const changedHasToPickUp = claim.hasToPickUp != data.hasToPickUp;

        if (!canUpdate || !hasRights || changedHasToPickUp && !isSalesAssistant)
            throw new UserError(`You don't have enough privileges to change that field`);

        const updatedClaim = await claim.updateAttributes(data);

        // Get sales person from claim client
        const salesPerson = claim.client().salesPerson();
        if (salesPerson && updatedClaim.hasToPickUp) {
            const origin = ctx.req.headers.origin;
            const message = $t('Claim will be picked', {
                claimId: claim.id,
                clientName: claim.client().name,
                claimUrl: `${origin}/#!/claim/${claim.id}/summary`
            });
            await models.Chat.sendCheckingPresence(ctx, salesPerson.id, message);
        }

        return updatedClaim;
    };

    async function canChangeState(ctx, id) {
        let models = Self.app.models;
        let userId = ctx.req.accessToken.userId;

        let state = await models.ClaimState.findById(id, {
            include: {
                relation: 'writeRole'
            }
        });
        let stateRole = state.writeRole().name;
        let canUpdate = await models.Account.hasRole(userId, stateRole);

        return canUpdate;
    }
};