package com.pollex.pam.web.rest; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.PostMapping; import org.springframework.web.bind.annotation.RequestBody; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RestController; import com.pollex.pam.domain.Appointment; import com.pollex.pam.domain.AppointmentNoticeLog; import com.pollex.pam.security.SecurityUtils; import com.pollex.pam.service.AppointmentService; import com.pollex.pam.service.NoticeService; import com.pollex.pam.service.dto.AppointmentNoticeSendDTO; @RestController @RequestMapping("/api/notice") public class NoticeResource { @Autowired NoticeService noticeService; @Autowired AppointmentService appointmentService; @PostMapping("/send") public void sendNotice(@RequestBody AppointmentNoticeSendDTO dto) { Appointment appointment = appointmentService.findById(dto.getAppointmentId()); if(!appointment.getAgentNo().equals(SecurityUtils.getAgentNo())) { throw new IllegalAccessError("The user do not have access permission"); } noticeService.sendNotice(dto); } }