From c5e6b236c4fe262d43c9b2f9fde1c9a8191c64a4 Mon Sep 17 00:00:00 2001
From: nidrissi-zouggari <nouhaila.idrissi-zouggari@al-enterprise.com>
Date: Wed, 11 Jun 2025 14:40:34 +0200
Subject: [PATCH] MT#61614 Display phonebook entries with edit restriction

Show entries from customer, reseller, and other
subscribers (same customer) in subscriber phonebook
by using `include=all` and filtering by
`subscriber_id=id` in API call.

Disable editing for entries not owned by the subscriber.

Change-Id: Ic95fbb926b7e31d31ad7a0a5a5646c7867c5bd3a
---
 src/api/subscriber.js                    |  1 +
 src/pages/CscPageSubscriberPhonebook.vue | 21 +++++++++++----------
 2 files changed, 12 insertions(+), 10 deletions(-)

diff --git a/src/api/subscriber.js b/src/api/subscriber.js
index 4305c99c..7fa34a74 100644
--- a/src/api/subscriber.js
+++ b/src/api/subscriber.js
@@ -779,6 +779,7 @@ export async function getSubscriberPhonebook (options) {
         delete options.order_by
         delete options.order_by_direction
     }
+    options.include = 'all'
     const list = await getList({
         resource: 'subscriberphonebookentries',
         all,
diff --git a/src/pages/CscPageSubscriberPhonebook.vue b/src/pages/CscPageSubscriberPhonebook.vue
index f5ae3fbb..58e567b5 100644
--- a/src/pages/CscPageSubscriberPhonebook.vue
+++ b/src/pages/CscPageSubscriberPhonebook.vue
@@ -58,6 +58,7 @@
                     <td>
                         <q-toggle
                             :model-value="row.shared"
+                            :disable="isLevelEntry(row.id)"
                             @update:model-value="toggleShared(row)"
                         />
                     </td>
@@ -75,12 +76,14 @@
                                 icon="fas fa-pen"
                                 color="primary"
                                 :label="$t('Edit')"
+                                :disable="isLevelEntry(row.id)"
                                 @click="showPhonebookDetails(row)"
                             />
                             <csc-popup-menu-item
                                 icon="delete"
                                 color="negative"
                                 :label="$t('Delete')"
+                                :disable="isLevelEntry(row.id)"
                                 @click="deleteRow(row)"
                             />
                         </csc-more-menu>
@@ -126,18 +129,11 @@ export default {
             'subscriberPhonebook'
         ]),
         ...mapGetters('user', [
-            'isPbxEnabled'
+            'isPbxEnabled',
+            'getSubscriberId'
         ]),
         columns () {
             return [
-                {
-                    name: 'id',
-                    required: true,
-                    label: this.$t('Id'),
-                    align: 'left',
-                    field: (row) => row.id,
-                    sortable: true
-                },
                 {
                     name: 'name',
                     required: true,
@@ -192,7 +188,8 @@ export default {
                 page,
                 rows: rowsPerPage,
                 order_by: sortBy,
-                order_by_direction: descending ? 'desc' : 'asc'
+                order_by_direction: descending ? 'desc' : 'asc',
+                subscriber_id: this.getSubscriberId
             })
             this.pagination = { ...props.pagination }
             this.pagination.rowsNumber = count
@@ -230,6 +227,10 @@ export default {
         async toggleShared (row) {
             await this.updateValueShared(row)
         },
+        isLevelEntry (id) {
+        // Entries with composite Ids are considered "level entries", must not be modified (no edit or delete allowed)
+            return /[a-z]/.test(id)
+        },
         openSeatTable () {
             this.$router.push('/user/seats')
         }