/*
 * Electronic Logistics Management Information System (eLMIS) is a supply chain management system for health commodities in a developing country setting.
 *
 * Copyright (C) 2015  John Snow, Inc (JSI). This program was produced for the U.S. Agency for International Development (USAID). It was prepared under the USAID | DELIVER PROJECT, Task Order 4.
 *
 * This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
package org.openlmis.web.controller.demographics;

import org.openlmis.core.web.OpenLmisResponse;
import org.openlmis.core.web.controller.BaseController;
import org.openlmis.demographics.dto.EstimateForm;
import org.openlmis.demographics.service.AnnualDistrictDemographicEstimateService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.ResponseEntity;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.stereotype.Controller;
import org.springframework.transaction.annotation.Transactional;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;

import javax.servlet.http.HttpServletRequest;

import static org.springframework.web.bind.annotation.RequestMethod.GET;
import static org.springframework.web.bind.annotation.RequestMethod.PUT;

@Controller
@RequestMapping(value = "/demographic/estimate/")
public class DistrictEstimateController extends BaseController {

  public static final String ESTIMATES = "estimates";
  @Autowired
  AnnualDistrictDemographicEstimateService service;

  @RequestMapping(value = "districts", method = GET, headers = ACCEPT_JSON)
  @PreAuthorize("@permissionEvaluator.hasPermission(principal,'MANAGE_DISTRICT_DEMOGRAPHIC_ESTIMATES')")
  public ResponseEntity<OpenLmisResponse> get(@RequestParam("year") Integer year, @RequestParam("program") Long programId, HttpServletRequest request) {
    return OpenLmisResponse.response(ESTIMATES, service.getEstimateForm(year, programId, loggedInUserId(request)));
  }

  @RequestMapping(value = "districts", method = PUT, headers = ACCEPT_JSON)
  @PreAuthorize("@permissionEvaluator.hasPermission(principal,'MANAGE_DISTRICT_DEMOGRAPHIC_ESTIMATES')")
  public ResponseEntity<OpenLmisResponse> save(@RequestBody EstimateForm form, HttpServletRequest request) {
    service.save(form, loggedInUserId(request));
    return OpenLmisResponse.response(ESTIMATES, form);
  }

  @Transactional
  @RequestMapping(value = "finalize/districts.json", method = PUT, headers = ACCEPT_JSON)
  @PreAuthorize("@permissionEvaluator.hasPermission(principal,'FINALIZE_DEMOGRAPHIC_ESTIMATES')")
  public ResponseEntity<OpenLmisResponse> finalizeEstimate(@RequestBody EstimateForm form, HttpServletRequest request) {
    service.finalizeEstimate(form, loggedInUserId(request));
    return OpenLmisResponse.response(ESTIMATES, form);
  }

  @Transactional
  @RequestMapping(value = "undo-finalize/districts.json", method = PUT, headers = ACCEPT_JSON)
  @PreAuthorize("@permissionEvaluator.hasPermission(principal,'UNLOCK_FINALIZED_DEMOGRAPHIC_ESTIMATES')")
  public ResponseEntity<OpenLmisResponse> undoFinalize(@RequestBody EstimateForm form, HttpServletRequest request) {
    service.undoFinalize(form, loggedInUserId(request));
    return OpenLmisResponse.response(ESTIMATES, form);
  }

}

@@ -2375,32 +2375,62 @@
 RAPHIC_ESTIMATES
+, MANAGE_DEMOGRAPHIC_ESTIMATES
 ')%22)%0A  public Re
@@ -2860,32 +2860,62 @@
 RAPHIC_ESTIMATES
+, MANAGE_DEMOGRAPHIC_ESTIMATES
 ')%22)%0A  public Re

Update district demographic estimate permission so that a user that has only facility demographic estimate permissions can view that without requiring further permissions.