admin/marco.pms.api
1
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Added suspend tenant API

Browse Source
This commit is contained in:
ashutosh.nehete 2025-08-12 14:49:23 +05:30
parent d9a454ca28
commit f19f759752
1 changed files with 91 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

93
Marco.Pms.Services/Controllers/TenantController.cs
View File

@ -713,9 +713,98 @@ namespace Marco.Pms.Services.Controllers
// DELETE api/<TenantController>/5
[HttpDelete("{id}")]
public void Delete(int id)
[HttpDelete("delete/{id}")]
public async Task<IActionResult> DeleteTenant(Guid id, [FromQuery] bool isActive = false)
{
var action = isActive ? "activation" : "deactivation";
_logger.LogInfo("Attempting tenant {Action} for ID: {TenantId}", action, id);
// --- 1. Authentication & Authorization ---
var loggedInEmployee = await _userHelper.GetCurrentEmployeeAsync();
if (loggedInEmployee == null)
{
_logger.LogWarning("Unauthorized tenant status update attempt. User is not logged in.");
return StatusCode(403, ApiResponse<object>.ErrorResponse("Unauthorized", "User must be logged in to perform this action.", 403));
}
using var scope = _serviceScopeFactory.CreateScope();
var _permissionService = scope.ServiceProvider.GetRequiredService<PermissionServices>();
var _updateLogHelper = scope.ServiceProvider.GetRequiredService<UtilityMongoDBHelper>();
var hasPermission = await _permissionService.HasPermission(PermissionsMaster.ManageTenants, loggedInEmployee.Id);
if (!hasPermission && !(loggedInEmployee.ApplicationUser?.IsRootUser ?? false))
{
_logger.LogWarning(
"Permission Denied: User {EmployeeId} attempted tenant status update for Tenant {TenantId} without 'ManageTenants' permission.",
loggedInEmployee.Id, id);
return StatusCode(403, ApiResponse<object>.ErrorResponse("Access Denied", "User does not have the required permissions for this action.", 403));
}
// --- 2. Data Retrieval ---
await using var context = await _dbContextFactory.CreateDbContextAsync();
var tenant = await context.Tenants
// Include related data only if it's required by the TenantVM mapping.
// If not, removing these improves performance.
.Include(t => t.Industry)
.Include(t => t.TenantStatus)
.FirstOrDefaultAsync(t => t.Id == id);
if (tenant == null)
{
_logger.LogWarning("Tenant status update failed: Tenant with ID {TenantId} not found.", id);
return NotFound(ApiResponse<object>.ErrorResponse("Not Found", $"Tenant with ID '{id}' was not found.", 404));
}
// --- 3. Logic & State Change ---
// Efficiency: If the state is already what is being requested, do nothing.
if (tenant.IsActive == isActive)
{
var currentStatus = isActive ? "already active" : "already inactive";
_logger.LogInfo("No action needed. Tenant {TenantId} is {Status}.", tenant.Id, currentStatus);
var noChangeMessage = $"Tenant was {currentStatus}. No changes were made.";
return Ok(ApiResponse<object>.SuccessResponse(_mapper.Map<TenantVM>(tenant), noChangeMessage, 200));
}
// Capture the state *before* modification for the audit log.
var tenantOldStateBson = _updateLogHelper.EntityToBsonDocument(tenant);
tenant.IsActive = isActive;
// --- 4. Database Persistence ---
try
{
await context.SaveChangesAsync();
_logger.LogInfo("Successfully updated Tenant {TenantId} IsActive status to {IsActive}.", tenant.Id, isActive);
}
catch (DbUpdateException ex) // Be more specific with exceptions if possible.
{
_logger.LogError(ex, "Database error occurred while updating status for Tenant {TenantId}.", tenant.Id);
return StatusCode(500, ApiResponse<object>.ErrorResponse("Database Error", "An error occurred while saving changes to the database.", 500));
}
catch (Exception ex)
{
_logger.LogError(ex, "An unexpected error occurred while updating status for Tenant {TenantId}.", tenant.Id);
return StatusCode(500, ApiResponse<object>.ErrorResponse("Server Error", "An unexpected error occurred.", 500));
}
// --- 5. Audit Logging ---
// This runs after the DB save is confirmed.
// Note: If this call fails, the audit log will be missing for a successful DB change.
// For critical systems, consider a more robust outbox pattern.
await _updateLogHelper.PushToUpdateLogsAsync(new UpdateLogsObject
{
EntityId = tenant.Id.ToString(),
UpdatedById = loggedInEmployee.Id.ToString(),
OldObject = tenantOldStateBson,
UpdatedAt = DateTime.UtcNow
}, "TenantModificationLog");
_logger.LogInfo("Audit log created for status change of Tenant {TenantId} by User {EmployeeId}.", tenant.Id, loggedInEmployee.Id);
// --- 6. Prepare and Return Response ---
var responseData = _mapper.Map<TenantVM>(tenant);
var successMessage = $"Tenant successfully {(isActive ? "activated" : "deactivated")}.";
return Ok(ApiResponse<object>.SuccessResponse(responseData, successMessage, 200));
}