Ensures allowing assigned IT Staff to check in outside geofence when and IT Service Request venue is outside premise

2026-03-17 07:20:24 +08:00
parent eeab3b1fcf
commit 3e3e4d560e
5 changed files with 438 additions and 34 deletions
@@ -0,0 +1,92 @@
+-- Revert server-side geofence validation in attendance_check_in/check_out.
+--
+-- This migration restores the original behavior where the client is responsible
+-- for geofence enforcement (and where check-in/check-out doesn't validate
+-- whether the provided location is inside the geofence).
+
+-- Recreate attendance_check_in without geofence validation.
+CREATE OR REPLACE FUNCTION public.attendance_check_in(
+  p_duty_id uuid,
+  p_lat double precision,
+  p_lng double precision
+) RETURNS uuid
+LANGUAGE plpgsql SECURITY DEFINER
+AS $$
+DECLARE
+  v_schedule duty_schedules%ROWTYPE;
+  v_log_id uuid;
+  v_now timestamptz := now();
+  v_status text;
+BEGIN
+  SELECT * INTO v_schedule FROM duty_schedules WHERE id = p_duty_id;
+  IF NOT FOUND THEN
+    RAISE EXCEPTION 'Duty schedule not found';
+  END IF;
+  IF v_schedule.user_id != auth.uid() THEN
+    RAISE EXCEPTION 'Not your duty schedule';
+  END IF;
+
+  IF v_now < (v_schedule.start_time - interval '2 hours') THEN
+    RAISE EXCEPTION 'Too early to check in (2-hour window)';
+  END IF;
+  IF v_now > v_schedule.end_time THEN
+    RAISE EXCEPTION 'Duty has already ended';
+  END IF;
+
+  -- Determine status (used only when first check-in)
+  IF v_now <= v_schedule.start_time THEN
+    v_status := 'arrival';
+  ELSE
+    v_status := 'late';
+  END IF;
+
+  -- Insert a new attendance log row for each check-in
+  INSERT INTO attendance_logs (user_id, duty_schedule_id, check_in_at, check_in_lat, check_in_lng)
+  VALUES (auth.uid(), p_duty_id, v_now, p_lat, p_lng)
+  RETURNING id INTO v_log_id;
+
+  -- Only update duty schedule on first check-in (preserve original arrival status)
+  UPDATE duty_schedules
+  SET check_in_at   = COALESCE(check_in_at, v_now),
+      check_in_location = ST_SetSRID(ST_MakePoint(p_lng, p_lat), 4326)::geography,
+      status = CASE
+                 WHEN check_in_at IS NULL THEN v_status::duty_status
+                 ELSE status
+               END
+  WHERE id = p_duty_id;
+
+  RETURN v_log_id;
+END;
+$$;
+
+-- Recreate attendance_check_out without geofence validation.
+CREATE OR REPLACE FUNCTION public.attendance_check_out(
+  p_attendance_id uuid,
+  p_lat double precision,
+  p_lng double precision,
+  p_justification text DEFAULT NULL
+) RETURNS void
+LANGUAGE plpgsql SECURITY DEFINER
+AS $$
+DECLARE
+  v_log attendance_logs%ROWTYPE;
+BEGIN
+  SELECT * INTO v_log FROM attendance_logs WHERE id = p_attendance_id;
+  IF NOT FOUND THEN
+    RAISE EXCEPTION 'Attendance log not found';
+  END IF;
+  IF v_log.user_id != auth.uid() THEN
+    RAISE EXCEPTION 'Not your attendance log';
+  END IF;
+  IF v_log.check_out_at IS NOT NULL THEN
+    RAISE EXCEPTION 'Already checked out';
+  END IF;
+
+  UPDATE attendance_logs
+  SET check_out_at = now(),
+      check_out_lat = p_lat,
+      check_out_lng = p_lng,
+      justification = COALESCE(p_justification, justification)
+  WHERE id = p_attendance_id;
+END;
+$$;