From 6392d831d682003a505581f35f322943f4f68485 Mon Sep 17 00:00:00 2001
From: Rizki <farazrizki13@gmail.com>
Date: Tue, 10 Mar 2026 14:53:20 +0700
Subject: [PATCH] fix: group po management by nik

---
 adapter/poadapter.js | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/adapter/poadapter.js b/adapter/poadapter.js
index d68de41..26c53d1 100644
--- a/adapter/poadapter.js
+++ b/adapter/poadapter.js
@@ -1649,10 +1649,13 @@ class PoAdapter extends Adapter {
 	async queryPoManagementList(req, callback) {
 		var apires = this.getApiResultDefined();
 		try {
+			const proc_nik = process.env.PROC_USER_NIK ?? "";
+			const proc_users = proc_nik.split(",");
+
 			let limit = req.query.limit;
 			let offset = req.query.offset;
 			let keyword = req.query.keyword;
-			// let nik = req.body.nik;
+			let nik = req.body.nik;
 
 			let qry = "select * from vw_po ";
 			qry =
@@ -1660,6 +1663,12 @@ class PoAdapter extends Adapter {
 				"where trim(ponumber) like '%" +
 				keyword +
 				"%' and ponumber<>'000' and status in (1,2,3,4,5,6)";
+
+			if (nik) {
+				if (!proc_users.includes(nik)) {
+					qry += ' and (iby="' + nik + ' or nikapproval="' + nik + '")';
+				}
+			}
 			// qry = qry +"order by _idx asc limit " + offset + ", " + limit;
 
 			// console.log(qry);
@@ -1682,6 +1691,11 @@ class PoAdapter extends Adapter {
 						});
 						qry = "select * from vw_po ";
 						qry = qry + "where trim(ponumber) like '%" + keyword + "%'  and ponumber<>'000'";
+						if (nik) {
+							if (!proc_users.includes(nik)) {
+								qry += ' and (iby="' + nik + ' or nikapproval="' + nik + '") ';
+							}
+						}
 						qry = qry + "order by _idx asc limit " + offset + ", " + limit;
 						db.query(qry, [], function (err, result, fields) {
 							if (err) {