From 2a685a743f425538562db8f35fe1ef2d2fdc6d45 Mon Sep 17 00:00:00 2001
From: Oliver Walters <oliver.henry.walters@gmail.com>
Date: Sat, 4 Jun 2022 09:31:34 +1000
Subject: [PATCH] Wrap search queries in permission checks

---
 lib/widget/search.dart | 104 +++++++++++++++++++++++------------------
 1 file changed, 58 insertions(+), 46 deletions(-)

diff --git a/lib/widget/search.dart b/lib/widget/search.dart
index c2bc63f5..49662476 100644
--- a/lib/widget/search.dart
+++ b/lib/widget/search.dart
@@ -8,6 +8,7 @@ import "package:inventree/inventree/purchase_order.dart";
 import "package:inventree/widget/part_list.dart";
 import "package:inventree/widget/purchase_order_list.dart";
 import "package:inventree/widget/refreshable_state.dart";
+import "package:inventree/api.dart";
 import "package:inventree/l10.dart";
 import "package:inventree/inventree/part.dart";
 import "package:inventree/inventree/stock.dart";
@@ -115,6 +116,8 @@ class _SearchDisplayState extends RefreshableState<SearchWidget> {
    */
   Future<void> search(String term) async {
 
+    var api = InvenTreeAPI();
+
     setState(() {
       // Do not search on an empty string
       nPartResults = 0;
@@ -132,45 +135,53 @@ class _SearchDisplayState extends RefreshableState<SearchWidget> {
     }
 
     // Search parts
-    InvenTreePart().count(searchQuery: term).then((int n) {
-      if (term == searchController.text) {
-        setState(() {
-          nPartResults = n;
-          nSearchResults++;
-        });
-      }
-    });
+    if (api.checkPermission("part", "view")) {
+      InvenTreePart().count(searchQuery: term).then((int n) {
+        if (term == searchController.text) {
+          setState(() {
+            nPartResults = n;
+            nSearchResults++;
+          });
+        }
+      });
+    }
 
     // Search part categories
-    InvenTreePartCategory().count(searchQuery: term,).then((int n) {
-      if (term == searchController.text) {
-        setState(() {
-          nCategoryResults = n;
-          nSearchResults++;
-        });
-      }
-    });
+    if (api.checkPermission("part_category", "view")) {
+      InvenTreePartCategory().count(searchQuery: term,).then((int n) {
+        if (term == searchController.text) {
+          setState(() {
+            nCategoryResults = n;
+            nSearchResults++;
+          });
+        }
+      });
+    }
 
     // Search stock items
-    InvenTreeStockItem().count(searchQuery: term).then((int n) {
-      if (term == searchController.text) {
-        setState(() {
-          nStockResults = n;
-          nSearchResults++;
-        });
-      }
-    });
+    if (api.checkPermission("stock", "view")) {
+      InvenTreeStockItem().count(searchQuery: term).then((int n) {
+        if (term == searchController.text) {
+          setState(() {
+            nStockResults = n;
+            nSearchResults++;
+          });
+        }
+      });
+    }
 
     // Search stock locations
-    InvenTreeStockLocation().count(searchQuery: term).then((int n) {
-      if (term == searchController.text) {
-        setState(() {
-          nLocationResults = n;
+    if (api.checkPermission("stock_location", "view")) {
+      InvenTreeStockLocation().count(searchQuery: term).then((int n) {
+        if (term == searchController.text) {
+          setState(() {
+            nLocationResults = n;
 
-          nSearchResults++;
-        });
-      }
-    });
+            nSearchResults++;
+          });
+        }
+      });
+    }
 
     // TDOO: Re-implement this once display for companies has been fixed
     /*
@@ -188,20 +199,21 @@ class _SearchDisplayState extends RefreshableState<SearchWidget> {
      */
 
     // Search purchase orders
-    InvenTreePurchaseOrder().count(
-      searchQuery: term,
-      filters: {
-        "outstanding": "true"
-      }
-    ).then((int n) {
-      if (term == searchController.text) {
-        setState(() {
-          nPurchaseOrderResults = n;
-          nSearchResults++;
-        });
-      }
-    });
-
+    if (api.checkPermission("purchase_order", "view")) {
+      InvenTreePurchaseOrder().count(
+          searchQuery: term,
+          filters: {
+            "outstanding": "true"
+          }
+      ).then((int n) {
+        if (term == searchController.text) {
+          setState(() {
+            nPurchaseOrderResults = n;
+            nSearchResults++;
+          });
+        }
+      });
+    }
   }
 
   List<Widget> _tiles(BuildContext context) {