From ef8198733422d491619e0dab907a9c0713328c49 Mon Sep 17 00:00:00 2001
From: Aung Myo <aungmyo.zaw@code2lab.com>
Date: Fri, 4 May 2018 13:16:57 +0630
Subject: [PATCH 1/2] udpate access code for supervisor and manager

---
 app/assets/stylesheets/addorder.scss        | 23 +++++++++++++++++++++
 app/controllers/base_origami_controller.rb  |  2 +-
 app/controllers/origami/home_controller.rb  |  2 +-
 app/views/origami/addorders/detail.html.erb |  2 +-
 app/views/origami/home/show.html.erb        |  9 ++++++--
 app/views/origami/payments/show.html.erb    | 22 ++++++++++++++------
 6 files changed, 49 insertions(+), 11 deletions(-)

diff --git a/app/assets/stylesheets/addorder.scss b/app/assets/stylesheets/addorder.scss
index d8adba16..ba1089d2 100755
--- a/app/assets/stylesheets/addorder.scss
+++ b/app/assets/stylesheets/addorder.scss
@@ -247,4 +247,27 @@ i.logout_icon{
 }
 .list-menu > a:hover{
   text-decoration: none;
+}
+.cashier_number{
+  width: 33%;
+  height:58px;
+  line-height:58px;
+  text-align:center;
+  background:#54A5AF;
+  // float:left;
+  // margin:2px;
+  font-size:20px;
+  color:white;
+  // cursor:pointer;
+}
+.border-top{
+  border-top:1px solid #fff;
+}
+
+.border-right{
+  border-right:1px solid #fff;
+}
+
+.border-left{
+  border-left:1px solid #fff;
 }
\ No newline at end of file
diff --git a/app/controllers/base_origami_controller.rb b/app/controllers/base_origami_controller.rb
index 3cb1eacc..040ee2bf 100755
--- a/app/controllers/base_origami_controller.rb
+++ b/app/controllers/base_origami_controller.rb
@@ -23,7 +23,7 @@ class BaseOrigamiController < ActionController::Base
       end
     else 
       if ENV["SERVER_MODE"] != 'cloud'
-        protect_from_forgery with: :exception
+        # protect_from_forgery with: :exception
       end
       
       if current_user.nil?
diff --git a/app/controllers/origami/home_controller.rb b/app/controllers/origami/home_controller.rb
index ed857104..e2f15d19 100755
--- a/app/controllers/origami/home_controller.rb
+++ b/app/controllers/origami/home_controller.rb
@@ -132,7 +132,7 @@ class Origami::HomeController < BaseOrigamiController
 def check_emp_access_code
   pin_code = params[:code]
   employee = Employee.find_by_emp_id(pin_code)
-  if employee && employee.role == "manager"
+  if employee && (employee.role == "manager" || employee.role == "supervisor")
    result = {:status=> true, :message=>"Success" }
   else
     result = {:status=> false, :message=>"Invalid Access Code" }
diff --git a/app/views/origami/addorders/detail.html.erb b/app/views/origami/addorders/detail.html.erb
index 7e8cbb2c..5f451408 100644
--- a/app/views/origami/addorders/detail.html.erb
+++ b/app/views/origami/addorders/detail.html.erb
@@ -313,7 +313,7 @@
              <div class="col-md-3 cashier_number border-top border-left" data-value="9" data-type="num">9</div>
              <div class="col-md-3 cashier_number border-top border-left" data-value="0" data-type="num">0</div>
              <div class="col-md-3 cashier_number border-top border-left" data-value="00" data-type="num">00</div>
-              <div class="col-md-3 cashier_number border-top border-left orange" data-type="clr">Clr</div>
+              <div class="col-md-3 cashier_number border-top border-left  bg-orange" data-type="clr">Clr</div>
            </div>
          </div>
          <div class="modal-footer">
diff --git a/app/views/origami/home/show.html.erb b/app/views/origami/home/show.html.erb
index 54dd9e41..a3e26d8d 100755
--- a/app/views/origami/home/show.html.erb
+++ b/app/views/origami/home/show.html.erb
@@ -487,8 +487,13 @@
                 <% if current_login_employee.role != "waiter" %>
                   <!-- <button type="button" class="btn btn-block bg-blue waves-effect" id='edit' <%= (can? :edit, :sale_edit)? ' ': 'disabled=' %> active="true">Edit</button>
                   <button type="button" class="btn btn-block bg-blue waves-effect" data-toggle="modal" data-target="#voidModal" <%= (can? :overall_void, :void)? ' ': 'disabled=' %> > Void</button> -->
-                   <a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"   data-type="edit">Edit</a> 
-                  <a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"  data-type="void"> Void</a>
+                  <% if current_login_employee.role == "cashier" %>
+                    <a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"   data-type="edit">Edit</a> 
+                    <a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"  data-type="void"> Void</a>
+                  <% else %>
+                    <button type="button" class="btn btn-block bg-blue waves-effect" id='edit' <%= (can? :edit, :sale_edit)? ' ': 'disabled=' %> active="true">Edit</button>
+                    <button type="button" class="btn btn-block bg-blue waves-effect" data-toggle="modal" data-target="#voidModal" <%= (can? :overall_void, :void)? ' ': 'disabled=' %> > Void</button>
+                  <% end %>
                 <% end %>
                 <% if current_login_employee.role != "waiter" %>
                   <button type="button" id="discount" class="btn btn-block bg-blue waves-effect" <%= (can? :index, :discount)? ' ': 'disabled=' %> active="true">Discount</button>
diff --git a/app/views/origami/payments/show.html.erb b/app/views/origami/payments/show.html.erb
index 41f02b5d..56a64433 100755
--- a/app/views/origami/payments/show.html.erb
+++ b/app/views/origami/payments/show.html.erb
@@ -350,20 +350,30 @@
     <i class="material-icons">reply</i>
      Back
   </button>
-   <!--  <button type="button" class="btn bg-deep-purple btn-block" data-toggle="modal" data-target="#focModal" <%= (can? :foc, :payment)? ' ': 'disabled=' %> active="true"> FOC </button>
+   <!--   -->
+  <% if current_login_employee.role == "cashier" %>
+    <a class="btn btn-block bg-deep-purple waves-effect access_modal" data-toggle="modal"  data-type="foc"> FOC</a>
+    <a class="btn btn-block bg-red waves-effect access_modal" data-toggle="modal"  data-type="void"> Void</a>
+    <a class="btn btn-block bg-deep-purple waves-effect access_modal" data-toggle="modal"  data-type="waste"> Waste</a>
+    <a class="btn btn-block bg-deep-purple waves-effect access_modal" data-toggle="modal"  data-type="spoile"> Spoile</a>
+  <% else %>
+    <button type="button" class="btn bg-deep-purple btn-block" data-toggle="modal" data-target="#focModal" <%= (can? :foc, :payment)? ' ': 'disabled=' %> active="true"> FOC </button>
     <button type="button" class="btn bg-red btn-block" data-toggle="modal" data-target="#voidModal" <%= (can? :overall_void, :void)? ' ': 'disabled=' %> > Void </button>
     <button type="button" class="btn btn-block bg-deep-purple waves-effect " data-status="waste" value="waste" id="btn_waste" onclick="waste_and_spoilage('waste')">Waste</button>
-<button type="button" class="btn btn-block bg-deep-purple waves-effect " data-status="spoile" value="spoile" id="btn_spoile" onclick="waste_and_spoilage('spoile')">Spoile</button> -->
-<a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"  data-type="foc"> FOC</a>
-<a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"  data-type="void"> Void</a>
-<a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"  data-type="waste"> Waste</a>
-<a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"  data-type="spoile"> Spoile</a>
+    <button type="button" class="btn btn-block bg-deep-purple waves-effect " data-status="spoile" value="spoile" id="btn_spoile" onclick="waste_and_spoilage('spoile')">Spoile</button>
+  <% end %>
+
 <% if @cashier_type=="quick_service" %>
 <hr>
 
  <button type="button" id="survey" class="btn btn-block bg-blue waves-effect"><%= t("views.right_panel.detail.survey") %></button>
  <button type="button" id="customer" class="btn btn-block bg-blue waves-effect" >Customer</button>
+ <% if current_login_employee.role == "cashier" %>
   <a class="btn btn-block bg-blue waves-effect access_modal" data-toggle="modal"   data-type="edit">Edit</a>
+ <% else %>
+ <button type="button" class="btn btn-block bg-blue waves-effect" id='edit' <%= (can? :edit, :sale_edit)? ' ': 'disabled=' %> active="true">Edit</button>
+ <% end %>
+  
 <button type="button" id="discount" class="btn btn-block bg-blue waves-effect" <%= (can? :index, :discount)? ' ': 'disabled=' %> active="true">Discount</button>
 <button type="button" id="other-charges" class="btn btn-block bg-blue waves-effect">Charges</button>
   <!-- Waiter Buttons -->

From 6d2146893c8d17ad483141e067238e749c6a21ed Mon Sep 17 00:00:00 2001
From: Aung Myo <aungmyo.zaw@code2lab.com>
Date: Fri, 4 May 2018 13:45:36 +0630
Subject: [PATCH 2/2] udpate access code for supervisor and manager

---
 app/controllers/base_origami_controller.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/controllers/base_origami_controller.rb b/app/controllers/base_origami_controller.rb
index 040ee2bf..3cb1eacc 100755
--- a/app/controllers/base_origami_controller.rb
+++ b/app/controllers/base_origami_controller.rb
@@ -23,7 +23,7 @@ class BaseOrigamiController < ActionController::Base
       end
     else 
       if ENV["SERVER_MODE"] != 'cloud'
-        # protect_from_forgery with: :exception
+        protect_from_forgery with: :exception
       end
       
       if current_user.nil?