317 lines
13 KiB
Python
317 lines
13 KiB
Python
import logging
|
|
from flask import Blueprint, render_template, redirect, url_for, flash, request, abort
|
|
from flask_login import login_required, current_user
|
|
from app import db
|
|
from app.models.facility import Facility, Area
|
|
from app.models.project import Project
|
|
from app.utils.forms import FacilityForm, AreaForm
|
|
from app.utils.decorators import supervisor_required, admin_required, project_manager_required
|
|
from app.utils.audit import log_action, ACTION_CREATE, ACTION_UPDATE, ACTION_DELETE
|
|
from app.utils.scope import get_customer_scope, get_inspector_scope
|
|
from app.tenancy.gates import quota_soft_check
|
|
|
|
bp = Blueprint('facilities', __name__, url_prefix='/facilities')
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
@bp.route('/')
|
|
@login_required
|
|
def list_facilities():
|
|
if current_user.role == 'customer':
|
|
cids = get_customer_scope(current_user) or []
|
|
facilities = Facility.query.filter(
|
|
Facility.id.in_(cids), Facility.active == True
|
|
).order_by(Facility.name).all()
|
|
elif current_user.role == 'inspector':
|
|
fids = get_inspector_scope(current_user) or []
|
|
facilities = Facility.query.filter(
|
|
Facility.id.in_(fids), Facility.active == True
|
|
).order_by(Facility.name).all()
|
|
else:
|
|
facilities = Facility.query.order_by(Facility.name).all()
|
|
|
|
# Group facilities by Contract (Project) for the collapsible list view.
|
|
# Facilities with no contract are collected under key '__none__' and
|
|
# rendered last as "No Contract Assigned".
|
|
from collections import OrderedDict
|
|
grouped = OrderedDict()
|
|
ungrouped = []
|
|
for f in facilities:
|
|
if f.project:
|
|
key = f.project.name
|
|
grouped.setdefault(key, {'project': f.project, 'facilities': []})
|
|
grouped[key]['facilities'].append(f)
|
|
else:
|
|
ungrouped.append(f)
|
|
|
|
grouped = OrderedDict(sorted(grouped.items()))
|
|
if ungrouped:
|
|
grouped['__none__'] = {'project': None, 'facilities': ungrouped}
|
|
|
|
logger.info('FACILITIES | list | user=%s | total=%s | groups=%s',
|
|
current_user.username, len(facilities), len(grouped))
|
|
return render_template('facilities/list.html', facilities=facilities, grouped=grouped)
|
|
|
|
@bp.route('/new', methods=['GET', 'POST'])
|
|
@login_required
|
|
@supervisor_required
|
|
@quota_soft_check('facilities')
|
|
def create_facility():
|
|
form = FacilityForm()
|
|
projects = Project.query.filter_by(active=True).order_by(Project.name).all()
|
|
form.project_id.choices = [(0, '— None —')] + [(p.id, p.name) for p in projects]
|
|
|
|
if form.validate_on_submit():
|
|
project_id = form.project_id.data if form.project_id.data else None
|
|
facility = Facility(
|
|
name=form.name.data,
|
|
address=form.address.data,
|
|
contact_person=form.contact_person.data,
|
|
contact_phone=form.contact_phone.data,
|
|
project_id=project_id if project_id else None,
|
|
active=form.active.data
|
|
)
|
|
|
|
db.session.add(facility)
|
|
db.session.commit()
|
|
logger.info('FACILITIES | create | user=%s | facility_id=%s name=%r',
|
|
current_user.username, facility.id, facility.name)
|
|
log_action(ACTION_CREATE, 'Facility', facility.id, facility.name,
|
|
f'contact={facility.contact_person or ""}; project_id={facility.project_id}; active={facility.active}')
|
|
flash(f'Facility "{facility.name}" created successfully.', 'success')
|
|
return redirect(url_for('facilities.view_facility', facility_id=facility.id))
|
|
|
|
return render_template('facilities/form.html', form=form, title='Create Facility')
|
|
|
|
@bp.route('/<int:facility_id>')
|
|
@login_required
|
|
def view_facility(facility_id):
|
|
facility = db.session.get(Facility, facility_id)
|
|
if facility is None:
|
|
abort(404)
|
|
if current_user.role == 'customer':
|
|
cids = get_customer_scope(current_user) or []
|
|
if facility_id not in cids:
|
|
flash('Access denied.', 'danger')
|
|
return redirect(url_for('facilities.list_facilities'))
|
|
areas = facility.areas.order_by(Area.name).all()
|
|
return render_template('facilities/view.html', facility=facility, areas=areas)
|
|
|
|
@bp.route('/<int:facility_id>/edit', methods=['GET', 'POST'])
|
|
@login_required
|
|
@supervisor_required
|
|
def edit_facility(facility_id):
|
|
facility = db.session.get(Facility, facility_id)
|
|
if facility is None:
|
|
abort(404)
|
|
form = FacilityForm(obj=facility)
|
|
projects = Project.query.filter_by(active=True).order_by(Project.name).all()
|
|
form.project_id.choices = [(0, '— None —')] + [(p.id, p.name) for p in projects]
|
|
|
|
if form.validate_on_submit():
|
|
project_id = form.project_id.data if form.project_id.data else None
|
|
facility.name = form.name.data
|
|
facility.address = form.address.data
|
|
facility.contact_person = form.contact_person.data
|
|
facility.contact_phone = form.contact_phone.data
|
|
facility.project_id = project_id if project_id else None
|
|
facility.active = form.active.data
|
|
|
|
db.session.commit()
|
|
logger.info('FACILITIES | edit | user=%s | facility_id=%s name=%r',
|
|
current_user.username, facility.id, facility.name)
|
|
log_action(ACTION_UPDATE, 'Facility', facility.id, facility.name,
|
|
f'project_id={facility.project_id}; active={facility.active}')
|
|
flash(f'Facility "{facility.name}" updated successfully.', 'success')
|
|
return redirect(url_for('facilities.view_facility', facility_id=facility.id))
|
|
|
|
return render_template('facilities/form.html', form=form, facility=facility, title='Edit Facility')
|
|
|
|
@bp.route('/<int:facility_id>/delete', methods=['POST'])
|
|
@login_required
|
|
@admin_required
|
|
def delete_facility(facility_id):
|
|
facility = db.session.get(Facility, facility_id)
|
|
if facility is None:
|
|
abort(404)
|
|
|
|
if facility.inspections.count() > 0:
|
|
flash(f'Cannot delete "{facility.name}" — it has existing inspection records.', 'danger')
|
|
return redirect(url_for('facilities.view_facility', facility_id=facility.id))
|
|
|
|
facility_name = facility.name
|
|
facility_id_snap = facility.id
|
|
db.session.delete(facility)
|
|
db.session.commit()
|
|
logger.info('FACILITIES | delete | user=%s | facility_id=%s name=%r',
|
|
current_user.username, facility_id_snap, facility_name)
|
|
log_action(ACTION_DELETE, 'Facility', facility_id_snap, facility_name)
|
|
flash(f'Facility "{facility_name}" has been permanently deleted.', 'success')
|
|
return redirect(url_for('facilities.list_facilities'))
|
|
|
|
# Area Management Routes
|
|
|
|
@bp.route('/<int:facility_id>/areas/new', methods=['GET', 'POST'])
|
|
@login_required
|
|
@supervisor_required
|
|
def create_area(facility_id):
|
|
facility = db.session.get(Facility, facility_id)
|
|
if facility is None:
|
|
abort(404)
|
|
form = AreaForm()
|
|
form.facility_id.choices = [(facility.id, facility.name)]
|
|
form.facility_id.data = facility.id
|
|
|
|
if form.validate_on_submit():
|
|
area = Area(
|
|
name=form.name.data,
|
|
area_type=form.area_type.data,
|
|
facility_id=facility.id
|
|
)
|
|
|
|
db.session.add(area)
|
|
db.session.commit()
|
|
logger.info('FACILITIES | create_area | user=%s | area_id=%s name=%r facility=%r',
|
|
current_user.username, area.id, area.name, facility.name)
|
|
log_action(ACTION_CREATE, 'Area', area.id, area.name,
|
|
f'facility={facility.name}; type={area.area_type or ""}')
|
|
flash(f'Area "{area.name}" created successfully.', 'success')
|
|
return redirect(url_for('facilities.view_facility', facility_id=facility.id))
|
|
|
|
return render_template('facilities/area_form.html', form=form, facility=facility, title='Create Area')
|
|
|
|
@bp.route('/areas/<int:area_id>/edit', methods=['GET', 'POST'])
|
|
@login_required
|
|
@supervisor_required
|
|
def edit_area(area_id):
|
|
area = db.session.get(Area, area_id)
|
|
if area is None:
|
|
abort(404)
|
|
form = AreaForm(obj=area)
|
|
|
|
facilities = Facility.query.filter_by(active=True).order_by(Facility.name).all()
|
|
form.facility_id.choices = [(f.id, f.name) for f in facilities]
|
|
|
|
if form.validate_on_submit():
|
|
area.name = form.name.data
|
|
area.area_type = form.area_type.data
|
|
area.facility_id = form.facility_id.data
|
|
|
|
db.session.commit()
|
|
logger.info('FACILITIES | edit_area | user=%s | area_id=%s name=%r',
|
|
current_user.username, area.id, area.name)
|
|
log_action(ACTION_UPDATE, 'Area', area.id, area.name,
|
|
f'facility_id={area.facility_id}; type={area.area_type or ""}')
|
|
flash(f'Area "{area.name}" updated successfully.', 'success')
|
|
return redirect(url_for('facilities.view_facility', facility_id=area.facility_id))
|
|
|
|
return render_template('facilities/area_form.html', form=form, area=area, facility=area.facility, title='Edit Area')
|
|
|
|
@bp.route('/areas/<int:area_id>/delete', methods=['POST'])
|
|
@login_required
|
|
@supervisor_required
|
|
def delete_area(area_id):
|
|
area = db.session.get(Area, area_id)
|
|
if area is None:
|
|
abort(404)
|
|
facility_id = area.facility_id
|
|
|
|
if area.inspections.count() > 0:
|
|
flash('Cannot delete area with existing inspections.', 'danger')
|
|
return redirect(url_for('facilities.view_facility', facility_id=facility_id))
|
|
|
|
issue_count = area.issues.count()
|
|
if issue_count > 0:
|
|
flash(
|
|
f'Cannot delete area "{area.name}" — it has {issue_count} issue record(s) on file. '
|
|
f'Resolve or reassign those issues first.',
|
|
'danger'
|
|
)
|
|
return redirect(url_for('facilities.view_facility', facility_id=facility_id))
|
|
|
|
area_name = area.name
|
|
area_id_snap = area.id
|
|
db.session.delete(area)
|
|
db.session.commit()
|
|
logger.info('FACILITIES | delete_area | user=%s | area_id=%s name=%r',
|
|
current_user.username, area_id_snap, area_name)
|
|
log_action(ACTION_DELETE, 'Area', area_id_snap, area_name)
|
|
flash(f'Area "{area_name}" deleted successfully.', 'success')
|
|
return redirect(url_for('facilities.view_facility', facility_id=facility_id))
|
|
|
|
|
|
# ── Facility QR codes (phase38) ───────────────────────────────────────────────
|
|
|
|
def _qr_scan_url(facility):
|
|
"""Absolute public scan URL, built from the current host (rule 64 pattern)."""
|
|
return request.host_url.rstrip('/') + url_for('facility_qr.scan',
|
|
token=facility.qr_token)
|
|
|
|
|
|
@bp.route('/<int:facility_id>/qr')
|
|
@login_required
|
|
@project_manager_required
|
|
def qr_card(facility_id):
|
|
"""Printable QR card for one facility. Generates the token on first use."""
|
|
from app.utils.qr import qr_svg
|
|
|
|
facility = db.session.get(Facility, facility_id)
|
|
if facility is None:
|
|
abort(404)
|
|
|
|
if not facility.qr_token:
|
|
facility.ensure_qr_token()
|
|
db.session.commit()
|
|
logger.info('FACILITIES | qr_token_created | user=%s | facility_id=%s',
|
|
current_user.username, facility_id)
|
|
|
|
scan_url = _qr_scan_url(facility)
|
|
return render_template('facilities/qr_card.html',
|
|
facility=facility,
|
|
scan_url=scan_url,
|
|
svg=qr_svg(scan_url))
|
|
|
|
|
|
@bp.route('/qr-sheet')
|
|
@login_required
|
|
@project_manager_required
|
|
def qr_sheet():
|
|
"""Bulk print sheet — one labeled QR card per active facility."""
|
|
from app.utils.qr import qr_svg
|
|
|
|
facilities = Facility.query.filter_by(active=True).order_by(Facility.name).all()
|
|
|
|
generated = 0
|
|
for f in facilities:
|
|
if not f.qr_token:
|
|
f.ensure_qr_token()
|
|
generated += 1
|
|
if generated:
|
|
db.session.commit()
|
|
logger.info('FACILITIES | qr_tokens_created | user=%s | count=%s',
|
|
current_user.username, generated)
|
|
|
|
cards = [{'facility': f, 'svg': qr_svg(_qr_scan_url(f))} for f in facilities]
|
|
return render_template('facilities/qr_sheet.html', cards=cards)
|
|
|
|
|
|
@bp.route('/<int:facility_id>/qr/regenerate', methods=['POST'])
|
|
@login_required
|
|
@supervisor_required
|
|
def regenerate_qr(facility_id):
|
|
"""Rotate the QR token — invalidates every previously printed poster."""
|
|
import secrets
|
|
|
|
facility = db.session.get(Facility, facility_id)
|
|
if facility is None:
|
|
abort(404)
|
|
|
|
facility.qr_token = secrets.token_urlsafe(32)
|
|
db.session.commit()
|
|
logger.info('FACILITIES | qr_token_regenerated | user=%s | facility_id=%s',
|
|
current_user.username, facility_id)
|
|
log_action(ACTION_UPDATE, 'Facility', facility.id, facility.name,
|
|
'QR token regenerated — previously printed QR posters are now invalid')
|
|
flash('QR code regenerated. Previously printed posters no longer work — '
|
|
'print and post the new code.', 'success')
|
|
return redirect(url_for('facilities.qr_card', facility_id=facility_id)) |