acc. draft mode, take care of ADMIN role or on own listings

bizmatch-server/src/listings/business-listings.controller.ts

@@ -25,9 +25,10 @@ export class BusinessListingsController {
     return this.listingsService.findBusinessesByEmail(userid, req.user as JwtUser);
   }
 
+  @UseGuards(OptionalJwtAuthGuard)
   @Post('search')
-  find(@Body() criteria: ListingCriteria): any {
-    return this.listingsService.findListingsByCriteria(criteria, businesses);
+  find(@Request() req, @Body() criteria: ListingCriteria): any {
+    return this.listingsService.findBusinessListings(criteria, req.user as JwtUser);
   }
 
   @Post()

bizmatch-server/src/listings/commercial-property-listings.controller.ts

@@ -27,9 +27,10 @@ export class CommercialPropertyListingsController {
   findByEmail(@Request() req, @Param('email') email: string): Promise<CommercialPropertyListing[]> {
     return this.listingsService.findCommercialPropertiesByEmail(email, req.user as JwtUser);
   }
+  @UseGuards(OptionalJwtAuthGuard)
   @Post('search')
-  async find(@Body() criteria: ListingCriteria): Promise<any> {
-    return await this.listingsService.findListingsByCriteria(criteria, commercials);
+  async find(@Request() req, @Body() criteria: ListingCriteria): Promise<any> {
+    return await this.listingsService.findCommercialPropertyListings(criteria, req.user as JwtUser);
   }
   @Get('states/all')
   getStates(): any {

bizmatch-server/src/listings/listings.service.ts

@@ -1,5 +1,5 @@
 import { Inject, Injectable } from '@nestjs/common';
-import { and, eq, gte, ilike, lte, ne, sql } from 'drizzle-orm';
+import { and, eq, gte, ilike, lte, ne, or, sql } from 'drizzle-orm';
 import { NodePgDatabase } from 'drizzle-orm/node-postgres';
 import { WINSTON_MODULE_PROVIDER } from 'nest-winston';
 import { BusinessListing, CommercialPropertyListing } from 'src/models/db.model.js';
@@ -16,9 +16,8 @@ export class ListingsService {
     @Inject(PG_CONNECTION) private conn: NodePgDatabase<typeof schema>,
     private fileService: FileService,
   ) {}
-  private getConditions(criteria: ListingCriteria, table: typeof businesses | typeof commercials): any[] {
+  private getConditions(criteria: ListingCriteria, table: typeof businesses | typeof commercials, user: JwtUser): any[] {
     const conditions = [];
-    conditions.push(ne(table.draft, true));
     if (criteria.type) {
       conditions.push(eq(table.type, criteria.type));
     }
@@ -42,23 +41,46 @@ export class ListingsService {
   // ##############################################################
   // Listings general
   // ##############################################################
-  async findListingsByCriteria(criteria: ListingCriteria, table: typeof businesses | typeof commercials): Promise<{ data: Record<string, any>[]; total: number }> {
+
+  async findCommercialPropertyListings(criteria: ListingCriteria, user: JwtUser): Promise<any> {
     const start = criteria.start ? criteria.start : 0;
     const length = criteria.length ? criteria.length : 12;
-    return await this.findListings(table, criteria, start, length);
-  }
-  private async findListings(table: typeof businesses | typeof commercials, criteria: ListingCriteria, start = 0, length = 12): Promise<any> {
-    const conditions = this.getConditions(criteria, table);
+    const conditions = this.getConditions(criteria, commercials, user);
+    if (!user || (!user?.roles?.includes('ADMIN') ?? false)) {
+      conditions.push(or(eq(commercials.draft, false), eq(commercials.imagePath, emailToDirName(user?.username))));
+    }
     const [data, total] = await Promise.all([
       this.conn
         .select()
-        .from(table)
+        .from(commercials)
         .where(and(...conditions))
         .offset(start)
         .limit(length),
       this.conn
         .select({ count: sql`count(*)` })
-        .from(table)
+        .from(commercials)
+        .where(and(...conditions))
+        .then(result => Number(result[0].count)),
+    ]);
+    return { total, data };
+  }
+  async findBusinessListings(criteria: ListingCriteria, user: JwtUser): Promise<any> {
+    const start = criteria.start ? criteria.start : 0;
+    const length = criteria.length ? criteria.length : 12;
+    const conditions = this.getConditions(criteria, businesses, user);
+    if (!user || (!user?.roles?.includes('ADMIN') ?? false)) {
+      conditions.push(or(eq(businesses.draft, false), eq(businesses.imageName, emailToDirName(user?.username))));
+    }
+    const [data, total] = await Promise.all([
+      this.conn
+        .select()
+        .from(businesses)
+        .where(and(...conditions))
+        .offset(start)
+        .limit(length),
+      this.conn
+        .select({ count: sql`count(*)` })
+        .from(businesses)
         .where(and(...conditions))
         .then(result => Number(result[0].count)),
     ]);

bizmatch-server/src/models/main.model.ts

@@ -198,6 +198,9 @@ export function isEmpty(value: any): boolean {
   return false;
 }
 export function emailToDirName(email: string): string {
+  if (email === undefined || email === null) {
+    return null;
+  }
   // Entferne ungültige Zeichen und ersetze sie durch Unterstriche
   const sanitizedEmail = email.replace(/[^a-zA-Z0-9_-]/g, '_');