Initial commit – AufmaßCreater v2.35

_aufmass_web/app/routes/contracts.py

@@ -0,0 +1,128 @@
+from flask import Blueprint, render_template, request, flash, redirect, url_for, jsonify
+from flask_login import login_required, current_user
+from app.extensions import db
+from app.models.contract import Contract
+from app.models.lv import LVPosition
+from datetime import datetime
+
+contracts_bp = Blueprint('contracts', __name__)
+
+def _vertrag_berechtigt():
+    if current_user.is_superadmin():
+        return True
+    if current_user.is_firmadmin() or current_user.darf_lv_verwalten:
+        return True
+    return False
+
+@contracts_bp.route('/')
+@login_required
+def index():
+    if current_user.is_superadmin():
+        contracts = Contract.query.order_by(Contract.name).all()
+    else:
+        contracts = Contract.query.filter_by(
+            company_id=current_user.company_id
+        ).order_by(Contract.name).all()
+    return render_template('contracts/index.html', contracts=contracts, titel='Verträge')
+
+@contracts_bp.route('/neu', methods=['GET', 'POST'])
+@login_required
+def neu():
+    if not _vertrag_berechtigt():
+        flash('Keine Berechtigung.', 'danger')
+        return redirect(url_for('contracts.index'))
+    if request.method == 'POST':
+        c = Contract(
+            company_id=current_user.company_id,
+            name=request.form.get('name', '').strip(),
+            belegnummer=request.form.get('belegnummer', '').strip(),
+            beleg_datum=_parse_date(request.form.get('beleg_datum')),
+            laufzeit_start=_parse_date(request.form.get('laufzeit_start')),
+            laufzeit_ende=_parse_date(request.form.get('laufzeit_ende')),
+            status=request.form.get('status', 'NEU'),
+        )
+        db.session.add(c)
+        db.session.commit()
+        flash(f'Vertrag "{c.name}" angelegt.', 'success')
+        return redirect(url_for('contracts.index'))
+    return render_template('contracts/neu.html', titel='Neuer Vertrag')
+
+@contracts_bp.route('/<int:contract_id>')
+@login_required
+def detail(contract_id):
+    c = Contract.query.get_or_404(contract_id)
+    if c.company_id != current_user.company_id and not current_user.is_superadmin():
+        return 'Zugriff verweigert', 403
+    lv_names = db.session.query(LVPosition.lv_name).filter_by(
+        company_id=current_user.company_id, contract_id=contract_id
+    ).distinct().order_by(LVPosition.lv_name).all()
+    lv_names = [r[0] for r in lv_names]
+    return render_template('contracts/detail.html', contract=c, lv_names=lv_names, titel=c.name)
+
+@contracts_bp.route('/<int:contract_id>/status', methods=['POST'])
+@login_required
+def status_set(contract_id):
+    c = Contract.query.get_or_404(contract_id)
+    if c.company_id != current_user.company_id and not current_user.is_superadmin():
+        return 'Zugriff verweigert', 403
+    if not _vertrag_berechtigt():
+        flash('Keine Berechtigung.', 'danger')
+        return redirect(url_for('contracts.index'))
+    c.status = request.form.get('status', c.status)
+    db.session.commit()
+    flash('Status aktualisiert.', 'success')
+    return redirect(url_for('contracts.detail', contract_id=contract_id))
+
+@contracts_bp.route('/<int:contract_id>/update', methods=['POST'])
+@login_required
+def detail_update(contract_id):
+    c = Contract.query.get_or_404(contract_id)
+    if c.company_id != current_user.company_id and not current_user.is_superadmin():
+        return 'Zugriff verweigert', 403
+    if not _vertrag_berechtigt():
+        flash('Keine Berechtigung.', 'danger')
+        return redirect(url_for('contracts.index'))
+    c.belegnummer = request.form.get('belegnummer', '').strip()
+    c.beleg_datum = _parse_date(request.form.get('beleg_datum'))
+    c.laufzeit_start = _parse_date(request.form.get('laufzeit_start'))
+    c.laufzeit_ende = _parse_date(request.form.get('laufzeit_ende'))
+    c.status = request.form.get('status', c.status)
+    db.session.commit()
+    if request.headers.get('X-Requested-With') == 'XMLHttpRequest' or request.accept_mimetypes.best == 'application/json':
+        return jsonify({'ok': True})
+    flash('Vertrag aktualisiert.', 'success')
+    return redirect(url_for('contracts.detail', contract_id=contract_id))
+
+@contracts_bp.route('/<int:contract_id>/loeschen', methods=['POST'])
+@login_required
+def delete(contract_id):
+    c = Contract.query.get_or_404(contract_id)
+    if c.company_id != current_user.company_id and not current_user.is_superadmin():
+        return 'Zugriff verweigert', 403
+    if not _vertrag_berechtigt():
+        flash('Keine Berechtigung.', 'danger')
+        return redirect(url_for('contracts.index'))
+    db.session.delete(c)
+    db.session.commit()
+    flash('Vertrag gelöscht.', 'success')
+    return redirect(url_for('contracts.index'))
+
+@contracts_bp.route('/api/lv-names')
+@login_required
+def api_lv_names():
+    contract_id = request.args.get('contract_id', type=int)
+    q = db.session.query(LVPosition.lv_name).filter_by(company_id=current_user.company_id)
+    if contract_id:
+        q = q.filter_by(contract_id=contract_id)
+    names = [r[0] for r in q.distinct().order_by(LVPosition.lv_name).all()]
+    return jsonify(names)
+
+def _parse_date(s):
+    if not s:
+        return None
+    for fmt in ('%Y-%m-%d', '%d.%m.%Y', '%Y.%m.%d'):
+        try:
+            return datetime.strptime(s.strip(), fmt).date()
+        except ValueError:
+            continue
+    return None