Release 20250906 (#1209)

---------

Co-authored-by: semantic-release-bot <semantic-release-bot@martynus.net>

Author: AntoineRelief

CHANGELOG/CHANGELOG_next.md

@@ -1,3 +1,10 @@
+# [2.15.0-rc.1](https://github.com/ReliefApplications/ems-backend/compare/v2.14.0...v2.15.0-rc.1) (2025-08-29)
+
+
+### Features
+
+* file explorer widget ([ed7b3fa](https://github.com/ReliefApplications/ems-backend/commit/ed7b3fa899199fcd5035265ae63a27eb734e3f12)), closes [Ab#113709](https://github.com/Ab/issues/113709)
+
 # [2.14.0-rc.1](https://github.com/ReliefApplications/ems-backend/compare/v2.13.0...v2.14.0-rc.1) (2025-03-17)
 
 

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "ems-backend",
-  "version": "2.14.0",
+  "version": "2.15.0-rc.1",
   "description": "",
   "main": "index.js",
   "scripts": {

package.json

@@ -0,0 +1,95 @@
+import { NextFunction, Request, Response } from 'express';
+import { RouteDefinition } from 'types/route-definition';
+import BaseController from '../../abstractions/base.controller';
+import { Record, Resource } from '@models';
+import { Types } from 'mongoose';
+
+/**
+ * File controller
+ */
+export default class FileController extends BaseController {
+  public basePath = 'file';
+
+  /** @returns List of available routes */
+  public routes(): RouteDefinition[] {
+    return [
+      {
+        path: '/item/:itemId/associated-record',
+        method: 'get',
+        handler: this.findAssociatedRecordId.bind(this),
+      },
+    ];
+  }
+
+  /**
+   * Find the associated record ID for a given drive and item.
+   *
+   * @param req Express request
+   * @param res Express response
+   * @param next Express next function
+   * @returns Promise<void> - Sends the associated record ID in the response or an error if not found.
+   */
+  public async findAssociatedRecordId(
+    req: Request,
+    res: Response,
+    next: NextFunction
+  ): Promise<void> {
+    try {
+      const { itemId } = req.params;
+      const { resourceId } = req.query;
+      if (!resourceId && typeof resourceId !== 'string') {
+        res.status(400).send({ error: 'Resource ID is required' });
+        return;
+      }
+      if (!itemId) {
+        res.status(400).send({ error: 'Item ID is required' });
+        return;
+      }
+
+      const [resource] = await Resource.aggregate([
+        { $match: { _id: new Types.ObjectId(String(resourceId)) } },
+        {
+          $project: {
+            fileFields: {
+              $filter: {
+                input: '$fields',
+                cond: { $eq: ['$$this.type', 'file'] },
+              },
+            },
+          },
+        },
+      ]);
+
+      if (!resource) {
+        res.status(404).send({ error: 'Resource not found' });
+        return;
+      }
+
+      // Now use the file fields to build the query for Record
+      const fileFieldQueries = resource.fileFields.map((field) => ({
+        [`data.${field.name}`]: {
+          $elemMatch: {
+            'content.itemId': { $regex: new RegExp(`^${itemId}$`, 'i') },
+            // 'content.driveId': { $regex: new RegExp(`^${driveId}$`, 'i') },
+          },
+        },
+      }));
+
+      const associatedRecord = await Record.findOne({
+        resource: new Types.ObjectId(String(resourceId)),
+        archived: { $ne: true },
+        $or: fileFieldQueries,
+      }).select('_id');
+
+      if (!associatedRecord) {
+        res.status(404).send({ error: 'Record not found' });
+        return;
+      }
+
+      res.locals.data = associatedRecord._id;
+      this.send(res);
+    } catch (err) {
+      next(err);
+    }
+  }
+}

src/routes/file/file.controller.ts

@@ -15,6 +15,7 @@ import config from 'config';
 import { RouteDefinition } from 'types/route-definition';
 import { logger } from '@services/logger.service';
 import ActivityController from './activity/activity.controller';
+import FileController from './file/file.controller';
 
 /**
  *
@@ -82,7 +83,7 @@ export default function registerRoutes(): Router | undefined {
     router.use('/notification', notification);
 
     // Define an array of controller objects
-    const controllers = [new ActivityController()];
+    const controllers = [new ActivityController(), new FileController()];
 
     // Dynamically register routes for each controller
     controllers.forEach((controller) => {

src/routes/index.ts

@@ -141,6 +141,17 @@ export const RecordType = new GraphQLObjectType({
         })
       ),
     },
+    canUpdate: {
+      type: GraphQLBoolean,
+      async resolve(parent, args, context) {
+        const parentForm: Form = await Form.findById(
+          parent.form,
+          'fields permissions resource structure'
+        );
+        const ability = await extendAbilityForRecords(context.user, parentForm);
+        return ability.can('update', parent);
+      },
+    },
   }),
 });