hyb-oa/server/src/services/reimbursementVisibility.js

const GLOBAL_REIMBURSEMENT_VIEW_ROLES = new Set([
  "admin",
  "ceo",
  "finance",
  "finance_mgr",
  "hr",
]);

function isGlobalReimbursementViewRole(roleCodes = []) {
  return roleCodes.some((code) => GLOBAL_REIMBURSEMENT_VIEW_ROLES.has(code));
}

function buildOwnReimbursementScopeWhere(employeeId) {
  return {
    OR: [{ owner_id: employeeId }, { submitter_id: employeeId }],
  };
}

function buildViewAllReimbursementScopeWhere(employee) {
  if (isGlobalReimbursementViewRole(employee.roleCodes ?? [])) {
    return {};
  }

  return {
    OR: [
      { owner_id: employee.id },
      { submitter_id: employee.id },
      { owner: { direct_manager_id: employee.id } },
    ],
  };
}

function buildReimbursementBusinessFactWhere(employeeId) {
  return {
    OR: [
      { status: { not: "draft" } },
      { owner_id: employeeId },
      { submitter_id: employeeId },
      { workflow_instances: { some: {} } },
    ],
  };
}

function buildReadableReimbursementWhere({ employee, scope = "all", filters = {} }) {
  const scopeWhere = scope === "own"
    ? buildOwnReimbursementScopeWhere(employee.id)
    : buildViewAllReimbursementScopeWhere(employee);

  if (scope === "own") {
    return { AND: [scopeWhere, filters, { deleted_at: null }] };
  }

  return {
    AND: [scopeWhere, buildReimbursementBusinessFactWhere(employee.id), filters, { deleted_at: null }],
  };
}

async function canReadReimbursementBusinessFact(prisma, reimbursement, employeeId) {
  if (reimbursement.owner_id === employeeId || reimbursement.submitter_id === employeeId) {
    return true;
  }

  let status = reimbursement.status;
  if (!status) {
    const current = await prisma.reimbursementForm.findUnique({
      where: { id: reimbursement.id },
      select: { status: true },
    });
    status = current?.status ?? null;
  }
  if (status !== "draft") {
    return Boolean(status);
  }

  const workflowInstance = await prisma.workflowInstance.findFirst({
    where: {
      entity_type: "reimbursement",
      entity_id: reimbursement.id,
    },
    select: { id: true },
  });
  return Boolean(workflowInstance);
}

module.exports = {
  buildOwnReimbursementScopeWhere,
  buildReadableReimbursementWhere,
  buildReimbursementBusinessFactWhere,
  buildViewAllReimbursementScopeWhere,
  canReadReimbursementBusinessFact,
  isGlobalReimbursementViewRole,
};