Files
compras/app/Http/Controllers/RequisitionAuditController.php
2026-11-03 11:51:44 +02:00

60 lines
2.8 KiB
PHP

<?php
namespace App\Http\Controllers;
use App\Models\Requisition;
use App\Models\User;
use App\Services\OrganizationAccess;
use App\Services\RequisitionAuditTrail;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\DB;
use Symfony\Component\HttpFoundation\StreamedResponse;
class RequisitionAuditController extends Controller
{
public function csv(Request $request, int $requisition, RequisitionAuditTrail $trail): StreamedResponse
{
$this->visible($request, $requisition);
return response()->streamDownload(function () use ($request, $requisition, $trail) {
DB::transaction(function () use ($request, $requisition, $trail) {
if (DB::getDriverName() === 'pgsql' && DB::transactionLevel() === 1) {
DB::statement('SET TRANSACTION ISOLATION LEVEL REPEATABLE READ READ ONLY');
}
$source = $this->visible($request, $requisition);
$out = fopen('php://output', 'w');
if ($out === false) {
throw new \RuntimeException('Não foi possível preparar a exportação.');
}
$text = static function (mixed $value): string {
$value = (string) ($value ?? '');
return preg_match('/^[\s\x00-\x1F]*[=+\-@]/u', $value) ? "'".$value : $value;
};
try {
fwrite($out, "\xEF\xBB\xBF");
fputcsv($out, ['Metadados do histórico da requisição', $text($source->number), 'Conferido em', now()->toIso8601String()], ';', '"', '');
fputcsv($out, ['Registo', 'Data registada', 'Acção', 'Utilizador (id)', 'Modo de execução'], ';', '"', '');
foreach ($trail->query($source)->lazyById(100) as $record) {
$row = $trail->row($record);
fputcsv($out, array_map($text, [$row['id'], $row['created_at'], $row['action'], $row['user_id'], $row['execution']]), ';', '"', '');
}
} finally {
fclose($out);
}
});
}, 'historico-requisicao-'.$requisition.'-'.now()->format('Ymd-His').'.csv', ['Content-Type' => 'text/csv; charset=UTF-8', 'Cache-Control' => 'private, no-store, max-age=0']);
}
private function visible(Request $request, int $id): Requisition
{
$actor = $request->user('web');
abort_unless($actor instanceof User, 403);
$actor = User::query()->where('tenant_id', $actor->tenant_id)->findOrFail($actor->id);
$access = app(OrganizationAccess::class);
abort_unless(! $access->maintenanceOnly($actor) && $access->permissions($actor) !== [], 403);
return Requisition::query()->visibleTo($actor)->findOrFail($id);
}
}