reactioncommerce · aldeed · Feb 26, 2019 · Feb 12, 2019 · Feb 12, 2019 · Feb 12, 2019
diff --git a/imports/node-app/core/util/buildContext.js b/imports/node-app/core/util/buildContext.js
@@ -1,4 +1,5 @@
 import { getHasPermissionFunctionForUser } from "/imports/plugins/core/accounts/server/no-meteor/hasPermission";
+import { getShopsUserHasPermissionForFunctionForUser } from "/imports/plugins/core/accounts/server/no-meteor/shopsUserHasPermissionFor";
 import getShopIdForContext from "/imports/plugins/core/accounts/server/no-meteor/getShopIdForContext";
 import getRootUrl from "/imports/plugins/core/core/server/util/getRootUrl";
 import getAbsoluteUrl from "/imports/plugins/core/core/server/util/getAbsoluteUrl";
@@ -38,6 +39,9 @@ export default async function buildContext(context, request = {}) {
   // Add a curried hasPermission tied to the current user (or to no user)
   context.userHasPermission = getHasPermissionFunctionForUser(context.user);
 
+  // Add array of all shopsIds user has permissions for
+  context.shopsUserHasPermissionFor = getShopsUserHasPermissionForFunctionForUser(context.user);
+
   context.rootUrl = getRootUrl(request);
   context.getAbsoluteUrl = (path) => getAbsoluteUrl(context.rootUrl, path);
 

diff --git a/imports/node-app/core/util/buildContext.test.js b/imports/node-app/core/util/buildContext.test.js
@@ -17,15 +17,16 @@ test("properly mutates the context object without user", async () => {
   await buildContext(context, { user: undefined });
   expect(context).toEqual({
     collections: mockContext.collections,
+    getAbsoluteUrl: jasmine.any(Function),
     queries: {
       primaryShopId: jasmine.any(Function)
     },
+    rootUrl: "http://localhost:3000/",
     shopId: "PRIMARY_SHOP_ID",
+    shopsUserHasPermissionFor: jasmine.any(Function),
     user: null,
     userHasPermission: jasmine.any(Function),
-    userId: null,
-    rootUrl: "http://localhost:3000/",
-    getAbsoluteUrl: jasmine.any(Function)
+    userId: null
   });
 });
 
@@ -45,15 +46,16 @@ test("properly mutates the context object with user", async () => {
     account: mockAccount,
     accountId: mockAccount._id,
     collections: mockContext.collections,
+    getAbsoluteUrl: jasmine.any(Function),
     queries: {
       primaryShopId: jasmine.any(Function)
     },
     shopId: "PRIMARY_SHOP_ID",
+    shopsUserHasPermissionFor: jasmine.any(Function),
     user: fakeUser,
     userHasPermission: jasmine.any(Function),
-    userId: fakeUser._id,
     rootUrl: "https://localhost:3000/",
-    getAbsoluteUrl: jasmine.any(Function)
+    userId: fakeUser._id
   });
 
   // Make sure the hasPermission currying works with one arg

diff --git a/imports/plugins/core/accounts/server/no-meteor/shopsUserHasPermissionFor.js b/imports/plugins/core/accounts/server/no-meteor/shopsUserHasPermissionFor.js
@@ -0,0 +1,29 @@
+import { curryN } from "ramda";
+
+/**
+ * @name shopsUserHasPermissionFor
+ * @method
+ * @memberof Accounts
+ * @param {Object} user - The user object, with `roles` property, to check.
+ * @param {String} permission - Permission to check for.
+ * @return {Array} Shop IDs user has provided permissions for
+ */
+export default function shopsUserHasPermissionFor(user, permission) {
+  if (!user || !user.roles || !permission) return [];
+
+  const { roles } = user;
+  const shopIds = [];
+
+  // `role` is a shopId, with an array of permissions attached to it.
+  // Get the key of each shopId, and check if the permission exists on that key
+  // If it does, then user has permission on this shop.
+  Object.keys(roles).forEach((role) => {
+    if (roles[role].includes(permission)) {
+      shopIds.push(role);
+    }
+  });
+
+  return shopIds;
+}
+
+export const getShopsUserHasPermissionForFunctionForUser = curryN(2, shopsUserHasPermissionFor);
diff --git a/imports/plugins/core/accounts/server/no-meteor/shopsUserHasPermissionFor.test.js b/imports/plugins/core/accounts/server/no-meteor/shopsUserHasPermissionFor.test.js
@@ -0,0 +1,49 @@
+import shopsUserHasPermissionFor from "./shopsUserHasPermissionFor";
+
+const user = {
+  roles: {
+    abc: [
+      "accounts",
+      "orders"
+    ],
+    def: [
+      "navigation",
+      "orders"
+    ]
+  }
+};
+
+test("returns blank array if no user", () => {
+  const result = shopsUserHasPermissionFor(null, "orders");
+  expect(result).toEqual([]);
+});
+
+test("returns blank array if no user.roles", () => {
+  const result = shopsUserHasPermissionFor({}, "orders");
+  expect(result).toEqual([]);
+});
+
+test("returns blank array if no permission", () => {
+  const result = shopsUserHasPermissionFor(user, null);
+  expect(result).toEqual([]);
+});
+
+test("returns an array of both shops for `orders` permission", () => {
+  const result = shopsUserHasPermissionFor(user, "orders");
+  expect(result).toEqual(["abc", "def"]);
+});
+
+test("returns an array of shop `abc` for `accounts` permission", () => {
+  const result = shopsUserHasPermissionFor(user, "accounts");
+  expect(result).toEqual(["abc"]);
+});
+
+test("returns an array of shop `def` for `navigation` permission", () => {
+  const result = shopsUserHasPermissionFor(user, "navigation");
+  expect(result).toEqual(["def"]);
+});
+
+test("returns a blank array for `dogs` permission", () => {
+  const result = shopsUserHasPermissionFor(user, "dogs");
+  expect(result).toEqual([]);
+});
diff --git a/imports/plugins/core/orders/client/index.js b/imports/plugins/core/orders/client/index.js
@@ -23,6 +23,8 @@ import "./templates/orders.js";
 import "./containers/invoiceContainer";
 import "./containers/orderSummaryContainer";
 
+import "../lib/extendShopSchema";
+
 registerOperatorRoute({
   path: "/orders/:_id",
   mainComponent: OrderDetail,

diff --git a/imports/plugins/core/orders/lib/extendShopSchema.js b/imports/plugins/core/orders/lib/extendShopSchema.js
@@ -0,0 +1,14 @@
+import { Shop } from "/imports/collections/schemas";
+
+/**
+ * @name Shop
+ * @memberof Schemas
+ * @type {SimpleSchema}
+ * @property {Object} orderStatusLabels optional
+ */
+Shop.extend({
+  orderStatusLabels: {
+    type: Object,
+    blackbox: true
+  }
+});
diff --git a/imports/plugins/core/orders/server/index.js b/imports/plugins/core/orders/server/index.js
@@ -3,4 +3,6 @@ import "./startup";
 import "./i18n";
 import methods from "./methods";
 
+import "../lib/extendShopSchema";
+
 Meteor.methods(methods);
diff --git a/imports/plugins/core/orders/server/no-meteor/queries/index.js b/imports/plugins/core/orders/server/no-meteor/queries/index.js
@@ -1,7 +1,9 @@
 import orderById from "./orderById";
 import orderByReferenceId from "./orderByReferenceId";
+import ordersByAccountId from "./ordersByAccountId";
 
 export default {
   orderById,
-  orderByReferenceId
+  orderByReferenceId,
+  ordersByAccountId
 };
diff --git a/imports/plugins/core/orders/server/no-meteor/queries/ordersByAccountId.js b/imports/plugins/core/orders/server/no-meteor/queries/ordersByAccountId.js
@@ -0,0 +1,54 @@
+import ReactionError from "@reactioncommerce/reaction-error";
+
+/**
+ * @name ordersByAccountId
+ * @method
+ * @memberof Order/NoMeteorQueries
+ * @summary Query the Orders collection for orders made by the provided accountId and (optionally) shopIds
+ * @param {Object} context - an object containing the per-request state
+ * @param {Object} params - request parameters
+ * @param {String} params.accountId - Account ID to search orders for
+ * @param {String} params.orderStatus - Workflow status to limit search results
+ * @param {String} params.shopIds - Shop IDs for the shops that owns the orders
+ * @return {Promise<Object>|undefined} - An Array of Order documents, if found
+ */
+export default async function ordersByAccountId(context, { accountId, orderStatus, shopIds } = {}) {
+  const { accountId: contextAccountId, collections, shopsUserHasPermissionFor, userHasPermission } = context;
+  const { Orders } = collections;
+
+  if (!accountId) {
+    throw new ReactionError("invalid-param", "You must provide accountId arguments");
+  }
+
+  let query = {
+    accountId
+  };
+
+  // If orderStatus array is provided, only return orders with statuses in Array
+  // Otherwise, return all orders
+  if (Array.isArray(orderStatus) && orderStatus.length > 0) {
+    query = {
+      "workflow.status": { $in: orderStatus },
+      ...query
+    };
+  }
+
+  if (shopIds) query.shopId = { $in: shopIds };
+
+  if (accountId !== contextAccountId) {
+    // If an admin wants all orders for an account, we force it to be limited to the
+    // shops for which they're allowed to see orders.
+    if (!shopIds) {
+      const shopIdsUserHasPermissionFor = shopsUserHasPermissionFor("orders");
+      query.shopId = { $in: shopIdsUserHasPermissionFor };
+    } else {
+      shopIds.forEach((shopId) => {
+        if (!userHasPermission(["orders"], shopId)) {
+          throw new ReactionError("access-denied", "Access Denied");
+        }
+      });
+    }
+  }
+
+  return Orders.find(query);
+}
diff --git a/imports/plugins/core/orders/server/no-meteor/resolvers/Order/index.js b/imports/plugins/core/orders/server/no-meteor/resolvers/Order/index.js
@@ -1,15 +1,20 @@
 import { encodeCartOpaqueId } from "@reactioncommerce/reaction-graphql-xforms/cart";
 import { encodeOrderOpaqueId, xformOrderPayment } from "@reactioncommerce/reaction-graphql-xforms/order";
 import { resolveAccountFromAccountId, resolveShopFromShopId } from "@reactioncommerce/reaction-graphql-utils";
+import orderDisplayStatus from "./orderDisplayStatus";
+import orderSummary from "./orderSummary";
 import totalItemQuantity from "./totalItemQuantity";
 
 export default {
   _id: (node) => encodeOrderOpaqueId(node._id),
   account: resolveAccountFromAccountId,
   cartId: (node) => encodeCartOpaqueId(node._id),
+  displayStatus: (node, { language }, context) => orderDisplayStatus(context, node, language),
   fulfillmentGroups: (node) => node.shipping || [],
   notes: (node) => node.notes || [],
   payments: (node) => (Array.isArray(node.payments) ? node.payments.map(xformOrderPayment) : null),
   shop: resolveShopFromShopId,
+  status: (node) => node.workflow.status,
+  summary: (node, _, context) => orderSummary(context, node),
   totalItemQuantity
 };
diff --git a/imports/plugins/core/orders/server/no-meteor/resolvers/Order/orderDisplayStatus.js b/imports/plugins/core/orders/server/no-meteor/resolvers/Order/orderDisplayStatus.js
@@ -0,0 +1,30 @@
+/**
+ * @name "Order.orderDisplayStatus"
+ * @method
+ * @memberof Order/GraphQL
+ * @summary Displays a human readable status of order state
+ * @param {Object} context An object with request-specific state
+ * @param {Object} order - Result of the parent resolver, which is a Order object in GraphQL schema format
+ * @param {String} language Language to filter item content by
+ * @return {String} A string of the order status
+ */
+export default async function orderDisplayStatus(context, order, language) {
+  const { Shops } = context.collections;
+  const shop = await Shops.findOne({ _id: order.shopId });
+  const orderStatusLabels = shop && shop.orderStatusLabels;
+  const { workflow: { status } } = order;
+
+  // If translations are available in the `Shops` collection,
+  // and are available for this specific order status, get translations
+  if (orderStatusLabels && orderStatusLabels[status]) {
+    const orderStatusLabel = orderStatusLabels[status];
+    const translatedLabel = orderStatusLabel.find((label) => label.language === language);
+
+    // If translations are available in desired language, return them.
+    // Otherwise, return raw status
+    return (translatedLabel && translatedLabel.label) || status;
+  }
+
+  // If no translations are available in the `Shops` collection, use raw status data
+  return status;
+}
diff --git a/imports/plugins/core/orders/server/no-meteor/resolvers/Order/orderSummary.js b/imports/plugins/core/orders/server/no-meteor/resolvers/Order/orderSummary.js
@@ -0,0 +1,78 @@
+import { xformRateToRateObject } from "@reactioncommerce/reaction-graphql-xforms/core";
+
+/**
+ * @name "Order.orderSummary"
+ * @method
+ * @memberof Order/GraphQL
+ * @summary Returns an aggregate of all fulfillmentGroup summaries to provide a single orderSummary
+ * @param {Object} context An object with request-specific state
+ * @param {Object} order - Result of the parent resolver, which is a Order object in GraphQL schema format
+ * @return {Object} An object containing order pricing information from all fulfillmentGroups
+ */
+export default async function orderSummary(context, order) {
+  const { currencyCode, shipping: fulfillmentMethods } = order;
+  const totalDiscounts = [];
+  const totalShipping = [];
+  const totalSubtotal = [];
+  const totalSurcharges = [];
+  const totalTaxableAmount = [];
+  const totalTaxes = [];
+  const totalTotal = [];
+
+  // Loop over each fulfillmentGroup (shipping[]), and push all values into `totalX` array
+  fulfillmentMethods.forEach((fulfillmentMethod) => {
+    const { invoice: { discounts, shipping, subtotal, surcharges, taxableAmount, taxes, total } } = fulfillmentMethod;
+
+    totalDiscounts.push(discounts);
+    totalShipping.push(shipping);
+    totalSubtotal.push(subtotal);
+    totalSurcharges.push(surcharges);
+    totalTaxableAmount.push(taxableAmount);
+    totalTaxes.push(taxes);
+    totalTotal.push(total);
+  });
+
+  // Reduce each `totalX` array to get order total from all fulfillmentGroups
+  const totalDiscountsAmount = totalDiscounts.reduce((acc, value) => acc + value, 0);
+  const totalShippingAmount = totalShipping.reduce((acc, value) => acc + value, 0);
+  const totalSubtotalAmount = totalSubtotal.reduce((acc, value) => acc + value, 0);
+  const totalSurchargesAmount = totalSurcharges.reduce((acc, value) => acc + value, 0);
+  const totalTaxableAmountAmount = totalTaxableAmount.reduce((acc, value) => acc + value, 0);
+  const totalTaxesAmount = totalTaxes.reduce((acc, value) => acc + value, 0);
+  const totalTotalAmount = totalTotal.reduce((acc, value) => acc + value, 0);
+
+  // Calculate effective tax rate of combined fulfillmentGroups
+  const effectiveTaxRate = totalTaxableAmountAmount > 0 ? totalTaxesAmount / totalTaxableAmountAmount : 0;
+
+  return {
+    discountTotal: {
+      amount: totalDiscountsAmount,
+      currencyCode
+    },
+    effectiveTaxRate: xformRateToRateObject(effectiveTaxRate),
+    fulfillmentTotal: {
+      amount: totalShippingAmount,
+      currencyCode
+    },
+    itemTotal: {
+      amount: totalSubtotalAmount,
+      currencyCode
+    },
+    surchargeTotal: {
+      amount: totalSurchargesAmount,
+      currencyCode
+    },
+    taxableAmount: {
+      amount: totalTaxableAmountAmount,
+      currencyCode
+    },
+    taxTotal: {
+      amount: totalTaxesAmount,
+      currencyCode
+    },
+    total: {
+      amount: totalTotalAmount,
+      currencyCode
+    }
+  };
+}
diff --git a/imports/plugins/core/orders/server/no-meteor/resolvers/Query/index.js b/imports/plugins/core/orders/server/no-meteor/resolvers/Query/index.js
@@ -1,7 +1,9 @@
 import orderById from "./orderById";
 import orderByReferenceId from "./orderByReferenceId";
+import ordersByAccountId from "./ordersByAccountId";
 
 export default {
   orderById,
-  orderByReferenceId
+  orderByReferenceId,
+  ordersByAccountId
 };