Merge branch 'asif/warehouses' of gitlab.com:CIEFWorldwideSdnBhd/izyim-api into asif/contact

# Conflicts:
#	app/Http/Controllers/ContactController.php
#	routes/api.php

app/Http/Controllers/ContactController.php

@@ -5,51 +5,46 @@ namespace App\Http\Controllers;
 use App\Contact;
 use App\Company;
 use Illuminate\Http\Request;
+use Auth;
 
 class ContactController extends Controller
 {
     public function index()
     {
-        $contact=Contact::all();
-        $response=[
-            'contact'=>$contact
-        ];
-        return response()->json($contact, 200);
+        $contacts = Contact::where('user_id', Auth::user()->id)->where('id', $id)->get();
+
+        if (!$contacts)
+        {
+            return response()->json(['message'=>'Access Denied!'], 404);
+        }
+
+        return response()->json($contacts, 200);
     }
 
     public function sendRequest(Request $request)
     {
-        // get company id from request ex:
-        //$request->input('company_id');
-        $company_id = $request->input('company_id');
+        $user = Auth::user();
+        $com_id = $request->input('com_id');
+
         // query to find company asisng to $company
-        $company = Company::find($company_id);
+        $company = Company::find($com_id);
 
         // get user from session
-         //$request->user();
+        $request->user();
         $user = $request->user();
 
         // prepare query
-        $contact = new Contact();
-        $contact->company_id = $company->id;
-        $contact->user_id = $user->id;
-        $contact->save();
-        // insert into database
+         $contact = new Contact();
+         $contact->com_id = $company->id;
+         $contact->user_id = $user->id;
+         $contact->save();
+
         return response()->json($contact, 201);
     }
 
-    public function destroy($id)
-    {
-        $contact = Contact::where("user_id", Auth::user()->id)->where('id', $id)->first();
-        //$contact=Contact::find($id);
-        $contact->delete();
-
-        return response()->json($contact, 204);
-    }
-
     public function acceptRequest(Request $request, $id)
     {
-        $contact = Contact::where("user_id", Auth::user()->id)->where('id', $id)->first();
+        $contact = Contact::where('com_id', Auth::user()->company())->where('id', $id)->first();
         //$contact = Contact::where('id', '=', e($id))->first();
         if($contact)
         {
@@ -63,6 +58,7 @@ class ContactController extends Controller
                 $contact->status=0;
             }
             else{
+
                 return response()->json(["message" => "not allowed"], 400);
             }
 
@@ -71,11 +67,20 @@ class ContactController extends Controller
                 return response()->json($contact, 201);
             }
                 return response()->json($contact, 400);
-
-//            $contact = $request->input('id');
-//            $contact->status = 1;
-//            $contact->save();
-           //return redirect()->back()->with('info','Request has been approved ');
         }
     }
+
+    public function destroy($id)
+    {
+        $contact = Contact::where('com_id', Auth::user()->company())->where('id', $id)->first();
+
+        if (!$contact)
+        {
+            return response()->json(['message'=>'Access Denied!'], 404);
+        }
+
+        $contact->delete($id);
+
+        return response()->json($contact, 204);
+    }
 }