emilsoftware-utilities 2.0.0-dev.23 → 2.0.0-dev.25

package/dist/accessi-module/Controllers/FiltriController.js

@@ -33,9 +33,8 @@ const FiltriService_1 = require("../Services/FiltriService/FiltriService");
 const jwt_strategy_1 = require("../jwt/jwt.strategy");
 const accessControl_1 = require("../security/accessControl");
 let FiltriController = FiltriController_1 = class FiltriController {
-    constructor(filtriService, options) {
+    constructor(filtriService) {
         this.filtriService = filtriService;
-        this.options = options;
     }
     getTipoFiltri(res) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -48,6 +47,42 @@ let FiltriController = FiltriController_1 = class FiltriController {
             }
         });
     }
+    createTipoFiltro(request, res, body) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare tipi filtro.');
+                yield this.filtriService.createTipoFiltro(body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo filtro ${body.tipFil} e' stato creato con successo.`, common_1.HttpStatus.CREATED);
+            }
+            catch (error) {
+                return Utilities_1.RestUtilities.sendErrorMessage(res, error, FiltriController_1.name);
+            }
+        });
+    }
+    updateTipoFiltro(request, res, tipFil, body) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare tipi filtro.');
+                yield this.filtriService.updateTipoFiltro(tipFil, body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo filtro ${tipFil} e' stato aggiornato con successo.`);
+            }
+            catch (error) {
+                return Utilities_1.RestUtilities.sendErrorMessage(res, error, FiltriController_1.name);
+            }
+        });
+    }
+    deleteTipoFiltro(request, res, tipFil) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono eliminare tipi filtro.');
+                yield this.filtriService.deleteTipoFiltro(tipFil);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo filtro ${tipFil} e' stato eliminato con successo.`);
+            }
+            catch (error) {
+                return Utilities_1.RestUtilities.sendErrorMessage(res, error, FiltriController_1.name);
+            }
+        });
+    }
     getFiltriUtente(request, res, req) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
@@ -106,6 +141,60 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], FiltriController.prototype, "getTipoFiltri", null);
+__decorate([
+    (0, common_1.Post)('tipi'),
+    (0, swagger_1.ApiOperation)({
+        operationId: 'createTipoFiltro',
+        summary: 'Crea un tipo di filtro',
+        description: 'Inserisce una nuova voce nel catalogo dei tipi di filtro. Operazione riservata al superutente.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Tipo filtro creato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Dtos_1.CreateFilterTypeRequest]),
+    __metadata("design:returntype", Promise)
+], FiltriController.prototype, "createTipoFiltro", null);
+__decorate([
+    (0, common_1.Put)('tipi/:tipFil'),
+    (0, swagger_1.ApiOperation)({
+        operationId: 'updateTipoFiltro',
+        summary: 'Aggiorna un tipo di filtro',
+        description: 'Aggiorna descrizione, campo o stato di un tipo di filtro esistente.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'tipFil', description: 'Identificativo del tipo filtro', required: true, example: 1, type: Number }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Tipo filtro aggiornato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Param)('tipFil', common_1.ParseIntPipe)),
+    __param(3, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Number, Dtos_1.UpdateFilterTypeRequest]),
+    __metadata("design:returntype", Promise)
+], FiltriController.prototype, "updateTipoFiltro", null);
+__decorate([
+    (0, common_1.Delete)('tipi/:tipFil'),
+    (0, swagger_1.ApiOperation)({
+        operationId: 'deleteTipoFiltro',
+        summary: 'Elimina un tipo di filtro',
+        description: 'Elimina un tipo di filtro solo se nessun filtro utente lo utilizza.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'tipFil', description: 'Identificativo del tipo filtro', required: true, example: 1, type: Number }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Tipo filtro eliminato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Param)('tipFil', common_1.ParseIntPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Number]),
+    __metadata("design:returntype", Promise)
+], FiltriController.prototype, "deleteTipoFiltro", null);
 __decorate([
     (0, common_1.Get)('utente'),
     (0, swagger_1.ApiOperation)({
@@ -181,7 +270,6 @@ exports.FiltriController = FiltriController = FiltriController_1 = __decorate([
     (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard)
     /** API per lettura e persistenza dei filtri applicativi collegati a un utente Accessi. */
     ,
-    __param(1, (0, common_1.Inject)('ACCESSI_OPTIONS')),
-    __metadata("design:paramtypes", [FiltriService_1.FiltriService, Object])
+    __metadata("design:paramtypes", [FiltriService_1.FiltriService])
 ], FiltriController);
 //# sourceMappingURL=FiltriController.js.map

package/dist/accessi-module/Controllers/FiltriController.js.map

@@ -1 +1 @@
-{"version":3,"file":"FiltriController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/FiltriController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAiG;AACjG,6CAAoF;AAEpF,+CAAgD;AAEhD,uDAAqE;AACrE,kCAAwF;AACxF,mDAAuD;AACvD,2EAAwE;AACxE,sDAAqD;AACrD,6DAImC;AAO5B,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAC3B,YACmB,aAA4B,EACD,OAAuB;QADlD,kBAAa,GAAb,aAAa,CAAe;QACD,YAAO,GAAP,OAAO,CAAgB;IAClE,CAAC;IAkBE,aAAa,CAAQ,GAAa;;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;gBAC1D,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IA4BK,eAAe,CACZ,OAAgB,EAChB,GAAa,EACX,GAA2B;;YAEpC,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,CAAC;gBAEnC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,IAAA,+BAAe,EACb,iBAAiB,EACjB,0EAA0E,CAC3E,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAAC,EACtB,qCAAqC,CACtC,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;gBACxE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IA4BK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACZ,GAAiB;;;YAEzB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,mCAAI,iBAAiB,CAAC,YAAY,CAAC;gBAErE,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAAC,EACtB,qCAAqC,CACtC,CAAC;gBAEF,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,cAAc,kCACrD,GAAG,KACN,MAAM,EAAE,cAAc,IACtB,CAAC;gBACH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,qCAAqC,cAAc,2BAA2B,CAC/E,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AA3IY,4CAAgB;AAsBrB;IAhBL,IAAA,YAAG,EAAC,MAAM,CAAC;IACX,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,wDAAwD;KACtE,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kDAAkD;QAC/D,IAAI,EAAE,8BAAiB;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,4BAAa;KACpB,CAAC;IACmB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAOzB;AA4BK;IA1BL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,yDAAyD;KACvE,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sDAAsD;QACnE,IAAI,EAAE,8BAAuB;KAC9B,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,4BAA4B;QACzC,IAAI,EAAE,4BAAa;KACpB,CAAC;IAEC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,GAAE,CAAA;;qDAAM,6BAAsB;;uDAwBrC;AA4BK;IA1BL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,4CAA4C;QACrD,WAAW,EAAE,+DAA+D;KAC7E,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,4BAAa;KACpB,CAAC;IAEC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;;qDAAM,mBAAY;;wDAuB1B;2BA1IU,gBAAgB;IAL5B,IAAA,iBAAO,EAAC,QAAQ,CAAC;IACjB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,gBAAgB,CAAC;IAC5B,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAC1B,0FAA0F;;IAIrF,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;qCADM,6BAAa;GAFpC,gBAAgB,CA2I5B","sourcesContent":["import { Body, Controller, Get, Inject, Post, Query, Req, Res, UseGuards } from '@nestjs/common';\nimport { ApiBearerAuth, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';\nimport { Request, Response } from 'express';\nimport { RestUtilities } from '../../Utilities';\nimport type { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\nimport { FiltriUtente, GetFiltriUtenteRequest, GetFiltriUtenteResponse } from '../Dtos';\nimport { GetFiltriResponse } from '../Dtos/TipoFiltro';\nimport { FiltriService } from '../Services/FiltriService/FiltriService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport {\n  ensureSelfOrSuperUser,\n  ensureSuperUser,\n  getAuthenticatedAccessiUser,\n} from '../security/accessControl';\n\n@ApiTags('Filtri')\n@ApiBearerAuth()\n@Controller('accessi/filtri')\n@UseGuards(JwtSimpleGuard)\n/** API per lettura e persistenza dei filtri applicativi collegati a un utente Accessi. */\nexport class FiltriController {\n  constructor(\n    private readonly filtriService: FiltriService,\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions,\n  ) {}\n\n  @Get('tipi')\n  @ApiOperation({\n    operationId: 'getTipiFiltro',\n    summary: 'Recupera la lista dei tipi di filtri',\n    description: 'Ritorna tutti i tipi di filtri disponibili nel sistema',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Lista dei tipi di filtri recuperata con successo',\n    type: GetFiltriResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno durante il recupero dei tipi di filtri',\n    type: ErrorResponse,\n  })\n  async getTipoFiltri(@Res() res: Response) {\n    try {\n      const response = await this.filtriService.getTipoFiltri();\n      return RestUtilities.sendBaseResponse(res, response);\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Get('utente')\n  @ApiOperation({\n    operationId: 'getFiltriUtente',\n    summary: 'Recupera i filtri di un utente',\n    description: 'Ritorna tutti i filtri associati ad un utente specifico',\n  })\n  @ApiResponse({\n    status: 200,\n    description: \"Lista dei filtri dell'utente recuperata con successo\",\n    type: GetFiltriUtenteResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nella richiesta.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 403,\n    description: 'Operazione non autorizzata.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno del server.',\n    type: ErrorResponse,\n  })\n  async getFiltriUtente(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Query() req: GetFiltriUtenteRequest,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const targetUserCode = req?.codUte;\n\n      if (targetUserCode === undefined) {\n        ensureSuperUser(\n          authenticatedUser,\n          'Solo gli amministratori possono consultare i filtri di tutti gli utenti.',\n        );\n      } else {\n        ensureSelfOrSuperUser(\n          authenticatedUser,\n          Number(targetUserCode),\n          'Puoi consultare solo i tuoi filtri.',\n        );\n      }\n\n      const response = await this.filtriService.getFiltriUser(targetUserCode);\n      return RestUtilities.sendBaseResponse(res, response);\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Post('utente')\n  @ApiOperation({\n    operationId: 'saveFiltriUtente',\n    summary: 'Inserisce o aggiorna i filtri di un utente',\n    description: 'Permette di salvare i filtri associati ad un utente specifico',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Filtri utente salvati con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore di validazione nei dati inviati.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 403,\n    description: 'Operazione non autorizzata.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno durante il salvataggio dei filtri utente',\n    type: ErrorResponse,\n  })\n  async saveFiltriUtente(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Body() req: FiltriUtente,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const targetUserCode = req?.codUte ?? authenticatedUser.codiceUtente;\n\n      ensureSelfOrSuperUser(\n        authenticatedUser,\n        Number(targetUserCode),\n        'Puoi modificare solo i tuoi filtri.',\n      );\n\n      await this.filtriService.upsertFiltriUtente(targetUserCode, {\n        ...req,\n        codUte: targetUserCode,\n      });\n      return RestUtilities.sendOKMessage(\n        res,\n        `Aggiornamento filtri per l'utente ${targetUserCode} effettuato correttamente`,\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n}\n"]}
+{"version":3,"file":"FiltriController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/FiltriController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAcwB;AACxB,6CAA8F;AAE9F,+CAAgD;AAChD,uDAAqE;AACrE,kCAMiB;AACjB,mDAAuD;AACvD,2EAAwE;AACxE,sDAAqD;AACrD,6DAImC;AAO5B,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAC3B,YACmB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAkBE,aAAa,CAAQ,GAAa;;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;gBAC1D,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IAWK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACZ,IAA6B;;YAErC,IAAI,CAAC;gBACH,IAAA,+BAAe,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,qDAAqD,CAAC,CAAC;gBAC7G,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAChD,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,kBAAkB,IAAI,CAAC,MAAM,gCAAgC,EAC7D,mBAAU,CAAC,OAAO,CACnB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IAYK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACW,MAAc,EACrC,IAA6B;;YAErC,IAAI,CAAC;gBACH,IAAA,+BAAe,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,yDAAyD,CAAC,CAAC;gBACjH,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACxD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,MAAM,oCAAoC,CAAC,CAAC;YACxG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IAYK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACW,MAAc;;YAE7C,IAAI,CAAC;gBACH,IAAA,+BAAe,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,wDAAwD,CAAC,CAAC;gBAChH,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAClD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,MAAM,mCAAmC,CAAC,CAAC;YACvG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IA4BK,eAAe,CACZ,OAAgB,EAChB,GAAa,EACX,GAA2B;;YAEpC,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,CAAC;gBAEnC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,IAAA,+BAAe,EACb,iBAAiB,EACjB,0EAA0E,CAC3E,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAAC,EACtB,qCAAqC,CACtC,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;gBACxE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IA4BK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACZ,GAAiB;;;YAEzB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,mCAAI,iBAAiB,CAAC,YAAY,CAAC;gBAErE,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAAC,EACtB,qCAAqC,CACtC,CAAC;gBAEF,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,cAAc,kCACrD,GAAG,KACN,MAAM,EAAE,cAAc,IACtB,CAAC;gBACH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,qCAAqC,cAAc,2BAA2B,CAC/E,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAtNY,4CAAgB;AAqBrB;IAhBL,IAAA,YAAG,EAAC,MAAM,CAAC;IACX,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,wDAAwD;KACtE,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kDAAkD;QAC/D,IAAI,EAAE,8BAAiB;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,4BAAa;KACpB,CAAC;IACmB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAOzB;AAWK;IATL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,gGAAgG;KAC9G,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iCAAiC,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IAClG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAEzF,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;;qDAAO,8BAAuB;;wDAatC;AAYK;IAVL,IAAA,YAAG,EAAC,cAAc,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qCAAqC,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACtG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAEzF,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,qBAAY,CAAC,CAAA;IAC7B,WAAA,IAAA,aAAI,GAAE,CAAA;;6DAAO,8BAAuB;;wDAStC;AAYK;IAVL,IAAA,eAAM,EAAC,cAAc,CAAC;IACtB,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,2BAA2B;QACpC,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oCAAoC,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACrG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAEzF,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,qBAAY,CAAC,CAAA;;;;wDAS/B;AA4BK;IA1BL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,yDAAyD;KACvE,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sDAAsD;QACnE,IAAI,EAAE,8BAAuB;KAC9B,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,4BAA4B;QACzC,IAAI,EAAE,4BAAa;KACpB,CAAC;IAEC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,GAAE,CAAA;;qDAAM,6BAAsB;;uDAwBrC;AA4BK;IA1BL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,4CAA4C;QACrD,WAAW,EAAE,+DAA+D;KAC7E,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,4BAAa;KACpB,CAAC;IAEC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;;qDAAM,mBAAY;;wDAuB1B;2BArNU,gBAAgB;IAL5B,IAAA,iBAAO,EAAC,QAAQ,CAAC;IACjB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,gBAAgB,CAAC;IAC5B,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAC1B,0FAA0F;;qCAGtD,6BAAa;GAFpC,gBAAgB,CAsN5B","sourcesContent":["import {\n  Body,\n  Controller,\n  Delete,\n  Get,\n  HttpStatus,\n  Param,\n  ParseIntPipe,\n  Post,\n  Put,\n  Query,\n  Req,\n  Res,\n  UseGuards,\n} from '@nestjs/common';\nimport { ApiBearerAuth, ApiOperation, ApiParam, ApiResponse, ApiTags } from '@nestjs/swagger';\nimport { Request, Response } from 'express';\nimport { RestUtilities } from '../../Utilities';\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\nimport {\n  CreateFilterTypeRequest,\n  FiltriUtente,\n  GetFiltriUtenteRequest,\n  GetFiltriUtenteResponse,\n  UpdateFilterTypeRequest,\n} from '../Dtos';\nimport { GetFiltriResponse } from '../Dtos/TipoFiltro';\nimport { FiltriService } from '../Services/FiltriService/FiltriService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport {\n  ensureSelfOrSuperUser,\n  ensureSuperUser,\n  getAuthenticatedAccessiUser,\n} from '../security/accessControl';\n\n@ApiTags('Filtri')\n@ApiBearerAuth()\n@Controller('accessi/filtri')\n@UseGuards(JwtSimpleGuard)\n/** API per lettura e persistenza dei filtri applicativi collegati a un utente Accessi. */\nexport class FiltriController {\n  constructor(\n    private readonly filtriService: FiltriService,\n  ) {}\n\n  @Get('tipi')\n  @ApiOperation({\n    operationId: 'getTipiFiltro',\n    summary: 'Recupera la lista dei tipi di filtri',\n    description: 'Ritorna tutti i tipi di filtri disponibili nel sistema',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Lista dei tipi di filtri recuperata con successo',\n    type: GetFiltriResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno durante il recupero dei tipi di filtri',\n    type: ErrorResponse,\n  })\n  async getTipoFiltri(@Res() res: Response) {\n    try {\n      const response = await this.filtriService.getTipoFiltri();\n      return RestUtilities.sendBaseResponse(res, response);\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Post('tipi')\n  @ApiOperation({\n    operationId: 'createTipoFiltro',\n    summary: 'Crea un tipo di filtro',\n    description: 'Inserisce una nuova voce nel catalogo dei tipi di filtro. Operazione riservata al superutente.',\n  })\n  @ApiResponse({ status: 201, description: 'Tipo filtro creato con successo', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Dati non validi', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  async createTipoFiltro(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Body() body: CreateFilterTypeRequest,\n  ) {\n    try {\n      ensureSuperUser(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono creare tipi filtro.');\n      await this.filtriService.createTipoFiltro(body);\n      return RestUtilities.sendOKMessage(\n        res,\n        `Il tipo filtro ${body.tipFil} e' stato creato con successo.`,\n        HttpStatus.CREATED,\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Put('tipi/:tipFil')\n  @ApiOperation({\n    operationId: 'updateTipoFiltro',\n    summary: 'Aggiorna un tipo di filtro',\n    description: 'Aggiorna descrizione, campo o stato di un tipo di filtro esistente.',\n  })\n  @ApiParam({ name: 'tipFil', description: 'Identificativo del tipo filtro', required: true, example: 1, type: Number })\n  @ApiResponse({ status: 200, description: 'Tipo filtro aggiornato con successo', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Dati non validi', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  async updateTipoFiltro(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Param('tipFil', ParseIntPipe) tipFil: number,\n    @Body() body: UpdateFilterTypeRequest,\n  ) {\n    try {\n      ensureSuperUser(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono modificare tipi filtro.');\n      await this.filtriService.updateTipoFiltro(tipFil, body);\n      return RestUtilities.sendOKMessage(res, `Il tipo filtro ${tipFil} e' stato aggiornato con successo.`);\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Delete('tipi/:tipFil')\n  @ApiOperation({\n    operationId: 'deleteTipoFiltro',\n    summary: 'Elimina un tipo di filtro',\n    description: 'Elimina un tipo di filtro solo se nessun filtro utente lo utilizza.',\n  })\n  @ApiParam({ name: 'tipFil', description: 'Identificativo del tipo filtro', required: true, example: 1, type: Number })\n  @ApiResponse({ status: 200, description: 'Tipo filtro eliminato con successo', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Dati non validi', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  async deleteTipoFiltro(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Param('tipFil', ParseIntPipe) tipFil: number,\n  ) {\n    try {\n      ensureSuperUser(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono eliminare tipi filtro.');\n      await this.filtriService.deleteTipoFiltro(tipFil);\n      return RestUtilities.sendOKMessage(res, `Il tipo filtro ${tipFil} e' stato eliminato con successo.`);\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Get('utente')\n  @ApiOperation({\n    operationId: 'getFiltriUtente',\n    summary: 'Recupera i filtri di un utente',\n    description: 'Ritorna tutti i filtri associati ad un utente specifico',\n  })\n  @ApiResponse({\n    status: 200,\n    description: \"Lista dei filtri dell'utente recuperata con successo\",\n    type: GetFiltriUtenteResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nella richiesta.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 403,\n    description: 'Operazione non autorizzata.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno del server.',\n    type: ErrorResponse,\n  })\n  async getFiltriUtente(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Query() req: GetFiltriUtenteRequest,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const targetUserCode = req?.codUte;\n\n      if (targetUserCode === undefined) {\n        ensureSuperUser(\n          authenticatedUser,\n          'Solo gli amministratori possono consultare i filtri di tutti gli utenti.',\n        );\n      } else {\n        ensureSelfOrSuperUser(\n          authenticatedUser,\n          Number(targetUserCode),\n          'Puoi consultare solo i tuoi filtri.',\n        );\n      }\n\n      const response = await this.filtriService.getFiltriUser(targetUserCode);\n      return RestUtilities.sendBaseResponse(res, response);\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Post('utente')\n  @ApiOperation({\n    operationId: 'saveFiltriUtente',\n    summary: 'Inserisce o aggiorna i filtri di un utente',\n    description: 'Permette di salvare i filtri associati ad un utente specifico',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Filtri utente salvati con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore di validazione nei dati inviati.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 403,\n    description: 'Operazione non autorizzata.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno durante il salvataggio dei filtri utente',\n    type: ErrorResponse,\n  })\n  async saveFiltriUtente(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Body() req: FiltriUtente,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const targetUserCode = req?.codUte ?? authenticatedUser.codiceUtente;\n\n      ensureSelfOrSuperUser(\n        authenticatedUser,\n        Number(targetUserCode),\n        'Puoi modificare solo i tuoi filtri.',\n      );\n\n      await this.filtriService.upsertFiltriUtente(targetUserCode, {\n        ...req,\n        codUte: targetUserCode,\n      });\n      return RestUtilities.sendOKMessage(\n        res,\n        `Aggiornamento filtri per l'utente ${targetUserCode} effettuato correttamente`,\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n}\n"]}

package/dist/accessi-module/Controllers/PermissionController.d.ts

@@ -1,6 +1,7 @@
 import { Request, Response } from 'express';
 import { AssignPermissionsToUserRequest } from '../Dtos/AssignPermissionsToUserRequest';
 import { AssignRolesToUserRequest } from '../Dtos/AssignRolesToUserRequest';
+import { CreateMenuGroupRequest, CreateMenuRequest, CreateMenuTypeRequest, UpdateMenuGroupRequest, UpdateMenuRequest, UpdateMenuTypeRequest } from '../Dtos/CatalogDtos';
 import { Role } from '../Dtos/Role';
 import { PermissionService } from '../Services/PermissionService/PermissionService';
 export declare class PermissionController {
@@ -15,5 +16,15 @@ export declare class PermissionController {
     deleteRole(request: Request, codiceRuolo: number, res: Response): Promise<Response<any, Record<string, any>>>;
     getMenus(res: Response): Promise<Response<any, Record<string, any>>>;
     getGroupsWithMenus(includeDisabled: string, res: Response): Promise<Response<any, Record<string, any>>>;
+    getMenuTypes(res: Response): Promise<Response<any, Record<string, any>>>;
+    createMenu(request: Request, body: CreateMenuRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    updateMenu(request: Request, codiceMenu: string, body: UpdateMenuRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    deleteMenu(request: Request, codiceMenu: string, res: Response): Promise<Response<any, Record<string, any>>>;
+    createMenuGroup(request: Request, body: CreateMenuGroupRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    updateMenuGroup(request: Request, codiceGruppo: string, body: UpdateMenuGroupRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    deleteMenuGroup(request: Request, codiceGruppo: string, res: Response): Promise<Response<any, Record<string, any>>>;
+    createMenuType(request: Request, body: CreateMenuTypeRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    updateMenuType(request: Request, codiceTipo: string, body: UpdateMenuTypeRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    deleteMenuType(request: Request, codiceTipo: string, res: Response): Promise<Response<any, Record<string, any>>>;
     getUserRolesAndGrants(request: Request, codiceUtente: number, res: Response): Promise<Response<any, Record<string, any>>>;
 }

package/dist/accessi-module/Controllers/PermissionController.js

@@ -29,6 +29,7 @@ const Utilities_1 = require("../../Utilities");
 const BaseResponse_1 = require("../Dtos/BaseResponse");
 const AssignPermissionsToUserRequest_1 = require("../Dtos/AssignPermissionsToUserRequest");
 const AssignRolesToUserRequest_1 = require("../Dtos/AssignRolesToUserRequest");
+const CatalogDtos_1 = require("../Dtos/CatalogDtos");
 const GetGroupsWithMenusResponse_1 = require("../Dtos/GetGroupsWithMenusResponse");
 const GetMenusResponse_1 = require("../Dtos/GetMenusResponse");
 const GetRolesResponse_1 = require("../Dtos/GetRolesResponse");
@@ -42,8 +43,8 @@ let PermissionController = PermissionController_1 = class PermissionController {
         this.permissionService = permissionService;
     }
     sendControllerError(res, error) {
-        const status = error instanceof common_1.HttpException ? error.getStatus() : common_1.HttpStatus.INTERNAL_SERVER_ERROR;
-        return Utilities_1.RestUtilities.sendErrorMessage(res, error, PermissionController_1.name, status);
+        // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).
+        return Utilities_1.RestUtilities.sendErrorMessage(res, error, PermissionController_1.name);
     }
     getRoles(res) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -61,11 +62,11 @@ let PermissionController = PermissionController_1 = class PermissionController {
             try {
                 (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare i ruoli.');
                 if (Number.isNaN(codiceRuolo))
-                    throw new Error('Il codice del ruolo e obbligatorio.');
+                    throw new common_1.BadRequestException('Il codice del ruolo e obbligatorio.');
                 if (!role.descrizioneRuolo)
-                    throw new Error('La descrizione del ruolo non puo essere vuota.');
+                    throw new common_1.BadRequestException('La descrizione del ruolo non puo essere vuota.');
                 if (!role.menu || role.menu.length === 0) {
-                    throw new Error('Il ruolo deve avere almeno un menu.');
+                    throw new common_1.BadRequestException('Il ruolo deve avere almeno un menu.');
                 }
                 yield this.permissionService.updateOrInsertRole(role, codiceRuolo);
                 return Utilities_1.RestUtilities.sendOKMessage(res, `Il ruolo ${codiceRuolo} e' stato aggiornato con successo.`);
@@ -80,11 +81,11 @@ let PermissionController = PermissionController_1 = class PermissionController {
             try {
                 (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare ruoli.');
                 if (!role)
-                    throw new Error('Il ruolo non puo essere vuoto.');
+                    throw new common_1.BadRequestException('Il ruolo non puo essere vuoto.');
                 if (!role.descrizioneRuolo)
-                    throw new Error('La descrizione del ruolo non puo essere vuota.');
+                    throw new common_1.BadRequestException('La descrizione del ruolo non puo essere vuota.');
                 if (!role.menu || role.menu.length === 0) {
-                    throw new Error('Il ruolo deve avere almeno un menu.');
+                    throw new common_1.BadRequestException('Il ruolo deve avere almeno un menu.');
                 }
                 yield this.permissionService.updateOrInsertRole(role);
                 return Utilities_1.RestUtilities.sendOKMessage(res, 'Il ruolo e stato creato con successo.', common_1.HttpStatus.CREATED);
@@ -161,6 +162,128 @@ let PermissionController = PermissionController_1 = class PermissionController {
             }
         });
     }
+    // -------------------------------------------------------------------------
+    // Gestione catalogo: tipi menu, gruppi, menu. Operazioni riservate al superutente.
+    // -------------------------------------------------------------------------
+    getMenuTypes(res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const types = yield this.permissionService.getMenuTypes();
+                return Utilities_1.RestUtilities.sendBaseResponse(res, types);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    createMenu(request, body, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare menu.');
+                yield this.permissionService.createMenu(body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il menu ${body.codiceMenu} e' stato creato con successo.`, common_1.HttpStatus.CREATED);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    updateMenu(request, codiceMenu, body, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare menu.');
+                yield this.permissionService.updateMenu(codiceMenu, body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il menu ${codiceMenu} e' stato aggiornato con successo.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    deleteMenu(request, codiceMenu, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono eliminare menu.');
+                yield this.permissionService.deleteMenu(codiceMenu);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il menu ${codiceMenu} e' stato eliminato con successo.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    createMenuGroup(request, body, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare gruppi.');
+                yield this.permissionService.createMenuGroup(body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il gruppo ${body.codiceGruppo} e' stato creato con successo.`, common_1.HttpStatus.CREATED);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    updateMenuGroup(request, codiceGruppo, body, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare gruppi.');
+                yield this.permissionService.updateMenuGroup(codiceGruppo, body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il gruppo ${codiceGruppo} e' stato aggiornato con successo.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    deleteMenuGroup(request, codiceGruppo, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono eliminare gruppi.');
+                yield this.permissionService.deleteMenuGroup(codiceGruppo);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il gruppo ${codiceGruppo} e' stato eliminato con successo.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    createMenuType(request, body, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare tipi menu.');
+                yield this.permissionService.createMenuType(body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo menu ${body.codiceTipo} e' stato creato con successo.`, common_1.HttpStatus.CREATED);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    updateMenuType(request, codiceTipo, body, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare tipi menu.');
+                yield this.permissionService.updateMenuType(codiceTipo, body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo menu ${codiceTipo} e' stato aggiornato con successo.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    deleteMenuType(request, codiceTipo, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono eliminare tipi menu.');
+                yield this.permissionService.deleteMenuType(codiceTipo);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo menu ${codiceTipo} e' stato eliminato con successo.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
     getUserRolesAndGrants(request, codiceUtente, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
@@ -344,6 +467,148 @@ __decorate([
     __metadata("design:paramtypes", [String, Object]),
     __metadata("design:returntype", Promise)
 ], PermissionController.prototype, "getGroupsWithMenus", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Recupera il catalogo dei tipi menu', operationId: 'getMenuTypes' }),
+    (0, swagger_1.ApiOkResponse)({ description: 'Elenco dei tipi menu', type: CatalogDtos_1.GetMenuTypesResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Get)('menu-types'),
+    __param(0, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "getMenuTypes", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Crea un nuovo menu', operationId: 'createMenu' }),
+    (0, swagger_1.ApiBody)({ type: CatalogDtos_1.CreateMenuRequest, description: 'Dati del nuovo menu' }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Menu creato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Post)('menus'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, CatalogDtos_1.CreateMenuRequest, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "createMenu", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Aggiorna un menu esistente', operationId: 'updateMenu' }),
+    (0, swagger_1.ApiParam)({ name: 'codiceMenu', description: 'Codice del menu da aggiornare', required: true, example: 'MNU001' }),
+    (0, swagger_1.ApiBody)({ type: CatalogDtos_1.UpdateMenuRequest, description: 'Campi del menu da aggiornare' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Menu aggiornato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Put)('menus/:codiceMenu'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceMenu')),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, CatalogDtos_1.UpdateMenuRequest, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "updateMenu", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Elimina un menu', operationId: 'deleteMenu' }),
+    (0, swagger_1.ApiParam)({ name: 'codiceMenu', description: 'Codice del menu da eliminare', required: true, example: 'MNU001' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Menu eliminato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Delete)('menus/:codiceMenu'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceMenu')),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "deleteMenu", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Crea un nuovo gruppo menu', operationId: 'createMenuGroup' }),
+    (0, swagger_1.ApiBody)({ type: CatalogDtos_1.CreateMenuGroupRequest, description: 'Dati del nuovo gruppo' }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Gruppo creato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Post)('menu-groups'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, CatalogDtos_1.CreateMenuGroupRequest, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "createMenuGroup", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Aggiorna un gruppo menu', operationId: 'updateMenuGroup' }),
+    (0, swagger_1.ApiParam)({ name: 'codiceGruppo', description: 'Codice del gruppo da aggiornare', required: true, example: 'A' }),
+    (0, swagger_1.ApiBody)({ type: CatalogDtos_1.UpdateMenuGroupRequest, description: 'Campi del gruppo da aggiornare' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Gruppo aggiornato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Put)('menu-groups/:codiceGruppo'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceGruppo')),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, CatalogDtos_1.UpdateMenuGroupRequest, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "updateMenuGroup", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Elimina un gruppo menu', operationId: 'deleteMenuGroup' }),
+    (0, swagger_1.ApiParam)({ name: 'codiceGruppo', description: 'Codice del gruppo da eliminare', required: true, example: 'A' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Gruppo eliminato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Delete)('menu-groups/:codiceGruppo'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceGruppo')),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "deleteMenuGroup", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Crea un nuovo tipo menu', operationId: 'createMenuType' }),
+    (0, swagger_1.ApiBody)({ type: CatalogDtos_1.CreateMenuTypeRequest, description: 'Dati del nuovo tipo menu' }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Tipo menu creato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Post)('menu-types'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, CatalogDtos_1.CreateMenuTypeRequest, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "createMenuType", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Aggiorna un tipo menu', operationId: 'updateMenuType' }),
+    (0, swagger_1.ApiParam)({ name: 'codiceTipo', description: 'Codice del tipo menu da aggiornare', required: true, example: 'A' }),
+    (0, swagger_1.ApiBody)({ type: CatalogDtos_1.UpdateMenuTypeRequest, description: 'Campi del tipo menu da aggiornare' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Tipo menu aggiornato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Put)('menu-types/:codiceTipo'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceTipo')),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, CatalogDtos_1.UpdateMenuTypeRequest, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "updateMenuType", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Elimina un tipo menu', operationId: 'deleteMenuType' }),
+    (0, swagger_1.ApiParam)({ name: 'codiceTipo', description: 'Codice del tipo menu da eliminare', required: true, example: 'A' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Tipo menu eliminato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    (0, common_1.Delete)('menu-types/:codiceTipo'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceTipo')),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, Object]),
+    __metadata("design:returntype", Promise)
+], PermissionController.prototype, "deleteMenuType", null);
 __decorate([
     (0, swagger_1.ApiOperation)({
         summary: 'Recupera i ruoli e i menu di un utente',