Delete CRUDs.

app/Http/Controllers/InvoiceController.php

@@ -328,7 +328,24 @@ class InvoiceController extends Controller {
     }
 
     public function deleteContact(Request $request) { // /api/rpc/invoice/contacts/delete
-        return '';
+        $check = $this->objAuth->checkLegit($request->username, $request->password);
+
+        if ($check == 0) {
+            return 'Err!';
+        }
+        else {
+            $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+            if ($valid['inv_mancontact'] == 1) {
+                DB::table('inv_contacts')->where('id', $request->id)->delete();
+
+                return 'Done.';
+            }
+            else {
+                return 'Permission denied.';
+            }
+        }
+    }
     }
 
     // Employers
@@ -385,7 +402,24 @@ class InvoiceController extends Controller {
     }
 
     public function deleteInvoice(Request $request) { // /api/rpc/invoice/invoices/delete
-        return '';
+        $check = $this->objAuth->checkLegit($request->username, $request->password);
+
+        if ($check == 0) {
+            return 'Err!';
+        }
+        else {
+            $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+            if ($valid['inv_makeinvoice'] == 1) {
+                DB::table('inv_invoices')->where('id', $request->id)->delete();
+
+                return 'Done.';
+            }
+            else {
+                return 'Permission denied.';
+            }
+        }
+    }
     }
 
     // Services
@@ -403,7 +437,27 @@ class InvoiceController extends Controller {
     }
 
     public function newService(Request $request) { // /api/rpc/invoice/services/new
-        return '';
+        $check = $this->objAuth->checkLegit($request->username, $request->password);
+
+        if ($check == 0) {
+            return 'Err!';
+        }
+        else {
+            $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+            if ($valid['inv_makeinvoice'] == 1) {
+                $add = DB::table('inv_services')
+                    ->insertGetId([
+                        'name' => $request->name,
+                        'rate' => $request->rate
+                    ]);
+
+                return $add;
+            }
+            else {
+                return 'Permission denied.';
+            }
+        }
     }
 
     public function editService(Request $request) { // /api/rpc/invoice/services/edit
@@ -411,7 +465,22 @@ class InvoiceController extends Controller {
     }
 
     public function deleteService(Request $request) { // /api/rpc/invoice/services/delete
-        return '';
-    }
+        $check = $this->objAuth->checkLegit($request->username, $request->password);
 
+        if ($check == 0) {
+            return 'Err!';
+        }
+        else {
+            $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+            if ($valid['inv_makeinvoice'] == 1) {
+                DB::table('inv_services')->where('id', $request->id)->delete();
+
+                return 'Done.';
+            }
+            else {
+                return 'Permission denied.';
+            }
+        }
+    }
 }