Update: 2026-05-04 00:37:13
This commit is contained in:
@@ -26,27 +26,39 @@ try {
|
||||
$where .= " AND tenant_id = :tenant_id";
|
||||
$params[':tenant_id'] = $tenantId;
|
||||
} else {
|
||||
// Accountant/Viewer: Filter by specific company
|
||||
// Accountant/Viewer: Filter by assigned companies
|
||||
$where .= " AND tenant_id = :tenant_id";
|
||||
$params[':tenant_id'] = $tenantId;
|
||||
|
||||
if ($companyId) {
|
||||
$where .= " AND company_id = :company_id";
|
||||
$params[':company_id'] = $companyId;
|
||||
|
||||
// Get assigned company IDs
|
||||
$stmtUser = $db->prepare("SELECT company_id FROM user_company_assignments WHERE user_id = ? AND is_active = 1");
|
||||
$stmtUser->execute([$decoded['user_id']]);
|
||||
$assignedCompanyIds = $stmtUser->fetchAll(PDO::FETCH_COLUMN);
|
||||
|
||||
if (empty($assignedCompanyIds)) {
|
||||
// No companies assigned, see nothing
|
||||
$where .= " AND 1=0";
|
||||
} else {
|
||||
$placeholders = implode(',', array_fill(0, count($assignedCompanyIds), '?'));
|
||||
$where .= " AND company_id IN ($placeholders)";
|
||||
// We need to merge params carefully since we are using both named and positional
|
||||
// Actually, let's switch to pure positional for simplicity here
|
||||
$where = str_replace(':tenant_id', '?', $where);
|
||||
$params = array_merge([$tenantId], $assignedCompanyIds);
|
||||
}
|
||||
}
|
||||
|
||||
// 3. Fetch Stats
|
||||
$stmt = $db->prepare("SELECT COUNT(*) FROM invoices $where");
|
||||
$stmt->execute($params);
|
||||
$stmt->execute(array_values($params));
|
||||
$total = $stmt->fetchColumn();
|
||||
|
||||
$stmt = $db->prepare("SELECT COUNT(*) FROM invoices $where AND status = 'pending'");
|
||||
$stmt->execute($params);
|
||||
$stmt->execute(array_values($params));
|
||||
$pending = $stmt->fetchColumn();
|
||||
|
||||
$stmt = $db->prepare("SELECT COUNT(*) FROM invoices $where AND status = 'approved'");
|
||||
$stmt->execute($params);
|
||||
$stmt->execute(array_values($params));
|
||||
$approved = $stmt->fetchColumn();
|
||||
|
||||
} catch (\Exception $e) {
|
||||
|
||||
Reference in New Issue
Block a user