feat(sprint-002): tkpurchase+tksafety requirePage 전환 완료

- tkpurchase scheduleRoutes: requireAdmin → requirePage('purchasing_schedule')
- tksafety checklistRoutes: requireAdmin → requirePage('safety_checklist')
- tksafety riskRoutes: requireAdmin → requirePage('safety_risk_assessment')
- tksafety visitRequestRoutes: requireAdmin → requirePage('safety_visit_management')
- visitRequestRoutes import 구문 에러 수정

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Hyungi Ahn
2026-03-30 07:59:45 +09:00
parent 6411eab210
commit 943ed63d77
4 changed files with 18 additions and 18 deletions

View File

@@ -14,6 +14,6 @@ router.put('/:id', requirePage('purchasing_schedule'), ctrl.update);
router.put('/:id/status', requirePage('purchasing_schedule'), ctrl.updateStatus); router.put('/:id/status', requirePage('purchasing_schedule'), ctrl.updateStatus);
router.put('/:id/approve', requirePage('purchasing_schedule'), ctrl.approveRequest); router.put('/:id/approve', requirePage('purchasing_schedule'), ctrl.approveRequest);
router.put('/:id/reject', requirePage('purchasing_schedule'), ctrl.rejectRequest); router.put('/:id/reject', requirePage('purchasing_schedule'), ctrl.rejectRequest);
router.delete('/:id', requireAdmin, ctrl.deleteSchedule); router.delete('/:id', requirePage('purchasing_schedule'), ctrl.deleteSchedule);
module.exports = router; module.exports = router;

View File

@@ -1,7 +1,7 @@
const express = require('express'); const express = require('express');
const router = express.Router(); const router = express.Router();
const checklistController = require('../controllers/checklistController'); const checklistController = require('../controllers/checklistController');
const { requireAuth, requireAdmin } = require('../middleware/auth'); const { requireAuth, requirePage } = require('../middleware/auth');
router.use(requireAuth); router.use(requireAuth);
@@ -11,8 +11,8 @@ router.get('/weather-conditions', checklistController.getWeatherConditions);
router.get('/work-types', checklistController.getWorkTypes); router.get('/work-types', checklistController.getWorkTypes);
router.get('/tasks/:workTypeId', checklistController.getTasksByWorkType); router.get('/tasks/:workTypeId', checklistController.getTasksByWorkType);
router.get('/:id', checklistController.getCheckById); router.get('/:id', checklistController.getCheckById);
router.post('/', requireAdmin, checklistController.createCheck); router.post('/', requirePage('safety_checklist'), checklistController.createCheck);
router.put('/:id', requireAdmin, checklistController.updateCheck); router.put('/:id', requirePage('safety_checklist'), checklistController.updateCheck);
router.delete('/:id', requireAdmin, checklistController.deleteCheck); router.delete('/:id', requirePage('safety_checklist'), checklistController.deleteCheck);
module.exports = router; module.exports = router;

View File

@@ -4,7 +4,7 @@ const multer = require('multer');
const path = require('path'); const path = require('path');
const fs = require('fs'); const fs = require('fs');
const riskController = require('../controllers/riskController'); const riskController = require('../controllers/riskController');
const { requireAuth, requireAdmin } = require('../middleware/auth'); const { requireAuth, requirePage } = require('../middleware/auth');
// 업로드 디렉토리 (multer destination에서 lazy 생성) // 업로드 디렉토리 (multer destination에서 lazy 생성)
const uploadDir = path.join(__dirname, '..', 'uploads', 'risk'); const uploadDir = path.join(__dirname, '..', 'uploads', 'risk');
@@ -40,7 +40,7 @@ router.get('/projects', riskController.getAllProjects);
router.post('/projects', riskController.createProject); router.post('/projects', riskController.createProject);
router.get('/projects/:id', riskController.getProjectById); router.get('/projects/:id', riskController.getProjectById);
router.patch('/projects/:id', riskController.updateProject); router.patch('/projects/:id', riskController.updateProject);
router.delete('/projects/:id', requireAdmin, riskController.deleteProject); router.delete('/projects/:id', requirePage('safety_risk_assessment'), riskController.deleteProject);
// 세부 공정 추가 (수시 평가용) // 세부 공정 추가 (수시 평가용)
router.post('/projects/:id/processes', riskController.addProcess); router.post('/projects/:id/processes', riskController.addProcess);
@@ -51,7 +51,7 @@ router.get('/projects/:id/export', riskController.exportExcel);
// 평가 항목 CRUD // 평가 항목 CRUD
router.post('/processes/:processId/items', riskController.createItem); router.post('/processes/:processId/items', riskController.createItem);
router.patch('/items/:itemId', riskController.updateItem); router.patch('/items/:itemId', riskController.updateItem);
router.delete('/items/:itemId', requireAdmin, riskController.deleteItem); router.delete('/items/:itemId', requirePage('safety_risk_assessment'), riskController.deleteItem);
// 감소대책 CRUD // 감소대책 CRUD
router.get('/projects/:id/mitigations', riskController.getMitigations); router.get('/projects/:id/mitigations', riskController.getMitigations);

View File

@@ -1,7 +1,7 @@
const express = require('express'); const express = require('express');
const router = express.Router(); const router = express.Router();
const visitRequestController = require('../controllers/visitRequestController'); const visitRequestController = require('../controllers/visitRequestController');
const { requireAuth, requireAdmin, requirePage } = require('../middleware/auth'); const { requireAuth, requirePage } = require('../middleware/auth');
router.use(requireAuth); router.use(requireAuth);
@@ -11,8 +11,8 @@ router.get('/requests', visitRequestController.getAllVisitRequests);
router.get('/requests/:id', visitRequestController.getVisitRequestById); router.get('/requests/:id', visitRequestController.getVisitRequestById);
router.put('/requests/:id', requirePage('safety_visit_request'), visitRequestController.updateVisitRequest); router.put('/requests/:id', requirePage('safety_visit_request'), visitRequestController.updateVisitRequest);
router.delete('/requests/:id', requirePage('safety_visit_request'), visitRequestController.deleteVisitRequest); router.delete('/requests/:id', requirePage('safety_visit_request'), visitRequestController.deleteVisitRequest);
router.put('/requests/:id/approve', requireAdmin, visitRequestController.approveVisitRequest); router.put('/requests/:id/approve', requirePage('safety_visit_management'), visitRequestController.approveVisitRequest);
router.put('/requests/:id/reject', requireAdmin, visitRequestController.rejectVisitRequest); router.put('/requests/:id/reject', requirePage('safety_visit_management'), visitRequestController.rejectVisitRequest);
// Check-in / Check-out // Check-in / Check-out
router.put('/requests/:id/check-in', visitRequestController.checkIn); router.put('/requests/:id/check-in', visitRequestController.checkIn);
@@ -32,16 +32,16 @@ router.get('/departments', visitRequestController.getDepartments);
// Visit purposes // Visit purposes
router.get('/purposes', visitRequestController.getAllVisitPurposes); router.get('/purposes', visitRequestController.getAllVisitPurposes);
router.get('/purposes/active', visitRequestController.getActiveVisitPurposes); router.get('/purposes/active', visitRequestController.getActiveVisitPurposes);
router.post('/purposes', requireAdmin, visitRequestController.createVisitPurpose); router.post('/purposes', requirePage('safety_visit_management'), visitRequestController.createVisitPurpose);
router.put('/purposes/:id', requireAdmin, visitRequestController.updateVisitPurpose); router.put('/purposes/:id', requirePage('safety_visit_management'), visitRequestController.updateVisitPurpose);
router.delete('/purposes/:id', requireAdmin, visitRequestController.deleteVisitPurpose); router.delete('/purposes/:id', requirePage('safety_visit_management'), visitRequestController.deleteVisitPurpose);
// Training records // Training records
router.post('/training', requireAdmin, visitRequestController.createTrainingRecord); router.post('/training', requirePage('safety_visit_management'), visitRequestController.createTrainingRecord);
router.get('/training', visitRequestController.getTrainingRecords); router.get('/training', visitRequestController.getTrainingRecords);
router.get('/training/request/:requestId', visitRequestController.getTrainingRecordByRequestId); router.get('/training/request/:requestId', visitRequestController.getTrainingRecordByRequestId);
router.put('/training/:id', requireAdmin, visitRequestController.updateTrainingRecord); router.put('/training/:id', requirePage('safety_visit_management'), visitRequestController.updateTrainingRecord);
router.delete('/training/:id', requireAdmin, visitRequestController.deleteTrainingRecord); router.delete('/training/:id', requirePage('safety_visit_management'), visitRequestController.deleteTrainingRecord);
router.post('/training/:id/complete', requireAdmin, visitRequestController.completeTraining); router.post('/training/:id/complete', requirePage('safety_visit_management'), visitRequestController.completeTraining);
module.exports = router; module.exports = router;