From 3400ac4d450a8e6782c6df0c6996f9745f3172f0 Mon Sep 17 00:00:00 2001
From: falendikategar <falendikapratama@gmail.com>
Date: Fri, 6 Sep 2024 09:54:31 +0700
Subject: [PATCH] update: Add role permission for Endpoint to Calculate Average
 Score By Sub Aspect and Aspect

---
 apps/backend/src/data/permissions.ts         | 12 ++++++++++++
 apps/backend/src/routes/assessments/route.ts |  7 ++++---
 2 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/apps/backend/src/data/permissions.ts b/apps/backend/src/data/permissions.ts
index d0a7c76..75d2495 100644
--- a/apps/backend/src/data/permissions.ts
+++ b/apps/backend/src/data/permissions.ts
@@ -104,6 +104,18 @@ const permissionsData = [
 	{
 		code: "assessments.updateAnswer",
 	},
+	{
+		code: "assessments.readAverageSubAspect",
+	},
+	{
+		code: "assessments.readAverageAllSubAspects",
+	},
+	{
+		code: "assessments.readAverageAspect",
+	},
+	{
+		code: "assessments.readAverageAllAspects",
+	},
 ] as const;
 
 export type SpecificPermissionCode = (typeof permissionsData)[number]["code"];
diff --git a/apps/backend/src/routes/assessments/route.ts b/apps/backend/src/routes/assessments/route.ts
index 604c903..462fd09 100644
--- a/apps/backend/src/routes/assessments/route.ts
+++ b/apps/backend/src/routes/assessments/route.ts
@@ -409,7 +409,7 @@ const assessmentsRoute = new Hono<HonoEnv>()
     // Get data for One Sub Aspect average score By Sub Aspect Id and Assessment Id
     .get(
         '/average-score/sub-aspects/:subAspectId/assessments/:assessmentId', 
-        // checkPermission("assessments.readAssessmentScore"),
+        checkPermission("assessments.readAverageSubAspect"), 
         async (c) => {
             const { subAspectId, assessmentId } = c.req.param();
         
@@ -440,7 +440,7 @@ const assessmentsRoute = new Hono<HonoEnv>()
      // Get data for All Sub Aspects average score By Assessment Id
     .get(
         '/average-score/sub-aspects/assessments/:assessmentId', 
-        // checkPermission("assessments.readAssessmentScore"),
+        checkPermission("assessments.readAverageAllSubAspects"), 
         async (c) => {
             const { assessmentId } = c.req.param();
         
@@ -472,6 +472,7 @@ const assessmentsRoute = new Hono<HonoEnv>()
     // Get data for One Aspect average score By Aspect Id and Assessment Id
     .get(
         "/average-score/aspects/:aspectId/assessments/:assessmentId", 
+        checkPermission("assessments.readAverageAspect"), 
         async (c) => {
             const { aspectId, assessmentId } = c.req.param();
         
@@ -503,7 +504,7 @@ const assessmentsRoute = new Hono<HonoEnv>()
     // Get data for All Aspects average score By Assessment Id
     .get(
         '/average-score/aspects/assessments/:assessmentId', 
-        // checkPermission("assessments.readAssessmentScore"),
+        checkPermission("assessments.readAverageAllAspects"), 
         async (c) => {
             const { assessmentId } = c.req.param();