From 37cc9442dabaeed25f1dcd835bbd0238a9f61682 Mon Sep 17 00:00:00 2001
From: Manus <dev-agent@manus.ai>
Date: Sun, 3 May 2026 10:56:20 -0400
Subject: [PATCH] feat: les admins voient toutes les factures/logs/historique
 BAP, colonne Utilisateur dans Factures

---
 client/src/pages/Invoices.tsx | 10 ++++++++++
 server/db.ts                  | 18 ++++++++++++++++++
 server/routers.ts             | 15 +++++++++++++++
 todo.md                       |  9 +++++++++
 4 files changed, 52 insertions(+)

diff --git a/client/src/pages/Invoices.tsx b/client/src/pages/Invoices.tsx
index 1c84f0a..16c5285 100644
--- a/client/src/pages/Invoices.tsx
+++ b/client/src/pages/Invoices.tsx
@@ -1,5 +1,6 @@
 import { useState } from "react";
 import DashboardLayout from "@/components/DashboardLayout";
+import { useAuth } from "@/_core/hooks/useAuth";
 import { Card, CardContent } from "@/components/ui/card";
 import { Button } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
@@ -52,9 +53,12 @@ export default function Invoices() {
   const [pendingInvoiceId, setPendingInvoiceId] = useState<number | null>(null);
   const [textDialogOpen, setTextDialogOpen] = useState(false);
   const [selectedInvoiceText, setSelectedInvoiceText] = useState<string | null>(null);
+  const { user } = useAuth();
+  const isAdmin = user?.role === 'admin';
   const { data: invoices, isLoading } = trpc.invoices.list.useQuery();
   const { data: departments } = trpc.departments.getByUser.useQuery();
   const { data: allocations } = trpc.accountingAllocations.getByUser.useQuery();
+  const { data: allUsers } = trpc.admin.getAllUsers.useQuery(undefined, { enabled: isAdmin });
   const utils = trpc.useUtils();
 
   const exportExcelMutation = trpc.sftp.exportToExcel.useMutation({
@@ -434,6 +438,7 @@ export default function Invoices() {
                           onCheckedChange={handleSelectAll}
                         />
                       </TableHead>
+                      {isAdmin && <TableHead>Utilisateur</TableHead>}
                       <TableHead>Fournisseur</TableHead>
                       <TableHead>Destinataire</TableHead>
                       <TableHead>N° Facture</TableHead>
@@ -456,6 +461,11 @@ export default function Invoices() {
                               onCheckedChange={(checked) => handleSelectOne(invoice.id, checked as boolean)}
                             />
                           </TableCell>
+                          {isAdmin && (
+                            <TableCell className="text-xs text-gray-500">
+                              {allUsers?.find(u => u.id === invoice.userId)?.name || `#${invoice.userId}`}
+                            </TableCell>
+                          )}
                           <TableCell className="font-medium">
                             <button
                               onClick={() => setLocation(`/invoices/${invoice.id}`)}
diff --git a/server/db.ts b/server/db.ts
index f941a0a..ca262fe 100644
--- a/server/db.ts
+++ b/server/db.ts
@@ -250,6 +250,12 @@ export async function getInvoicesByUser(userId: number): Promise<Invoice[]> {
   return getInvoicesByUserId(userId);
 }
 
+export async function getAllInvoices(): Promise<Invoice[]> {
+  const db = await getDb();
+  if (!db) return [];
+  return db.select().from(invoices).orderBy(desc(invoices.createdAt));
+}
+
 export async function updateInvoice(id: number, data: Partial<Invoice>) {
   const db = await getDb();
   if (!db) throw new Error("Database not available");
@@ -471,6 +477,12 @@ export async function getImportLogsByUser(userId: number): Promise<ImportLog[]>
   return db.select().from(importLogs).where(eq(importLogs.userId, userId)).orderBy(desc(importLogs.importedAt));
 }
 
+export async function getAllImportLogs(): Promise<ImportLog[]> {
+  const db = await getDb();
+  if (!db) return [];
+  return db.select().from(importLogs).orderBy(desc(importLogs.importedAt));
+}
+
 export async function deleteAllImportLogs(userId: number): Promise<void> {
   const db = await getDb();
   if (!db) throw new Error("Database not available");
@@ -809,6 +821,12 @@ export async function getBapHistoryByUser(userId: number): Promise<BapHistory[]>
     .orderBy(desc(bapHistory.validatedAt));
 }
 
+export async function getAllBapHistory(): Promise<BapHistory[]> {
+  const db = await getDb();
+  if (!db) return [];
+  return db.select().from(bapHistory).orderBy(desc(bapHistory.validatedAt));
+}
+
 export async function deleteBapHistoryEntry(id: number): Promise<void> {
   const db = await getDb();
   if (!db) return;
diff --git a/server/routers.ts b/server/routers.ts
index e46c21f..d6b064d 100644
--- a/server/routers.ts
+++ b/server/routers.ts
@@ -34,6 +34,9 @@ import {
   toggleUserActive,
   deleteUser,
   findDuplicateInvoice,
+  getAllInvoices,
+  getAllImportLogs,
+  getAllBapHistory,
   createImportLog,
   getImportLogsByUser,
   deleteAllImportLogs,
@@ -374,6 +377,10 @@ export const appRouter = router({
       }),
     
     list: protectedProcedure.query(async ({ ctx }) => {
+      // Les admins voient toutes les factures, les utilisateurs standard voient les leurs
+      if (ctx.user.role === 'admin') {
+        return getAllInvoices();
+      }
       return getInvoicesByUser(ctx.user.id);
     }),
     
@@ -788,6 +795,10 @@ export const appRouter = router({
   // ============= BAP HISTORY ROUTES =============
   bapHistory: router({
     getAll: protectedProcedure.query(async ({ ctx }) => {
+      // Les admins voient tout l'historique BAP
+      if (ctx.user.role === 'admin') {
+        return getAllBapHistory();
+      }
       return getBapHistoryByUser(ctx.user.id);
     }),
     delete: protectedProcedure
@@ -1311,6 +1322,10 @@ export const appRouter = router({
   // ============= IMPORT LOGS ROUTES =============
   importLogs: router({
     getByUser: protectedProcedure.query(async ({ ctx }) => {
+      // Les admins voient tous les logs d'import
+      if (ctx.user.role === 'admin') {
+        return getAllImportLogs();
+      }
       return getImportLogsByUser(ctx.user.id);
     }),
     
diff --git a/todo.md b/todo.md
index 4ff5509..100ad13 100644
--- a/todo.md
+++ b/todo.md
@@ -617,3 +617,12 @@
 - [ ] Ajouter la route validateBAPBulk côté serveur (traitement séquentiel de toutes les factures éligibles)
 - [ ] Ajouter le bouton "Valider tout en BAP" dans InvoicesBAP.tsx avec barre de progression
 - [ ] Déployer sur le VPS
+
+## Visibilité admin - toutes les factures
+- [x] Ajouter getAllInvoices() dans db.ts (sans filtre userId)
+- [x] Ajouter getAllImportLogs() dans db.ts (sans filtre userId)
+- [x] Ajouter getAllBapHistory() dans db.ts (sans filtre userId)
+- [x] Modifier invoices.list : les admins voient toutes les factures, les users voient les leurs
+- [x] Modifier importLogs.getByUser : les admins voient tous les logs
+- [x] Modifier bapHistory.getAll : les admins voient tout l'historique BAP
+- [x] Ajouter colonne "Utilisateur" dans Invoices.tsx (visible uniquement pour les admins)