adjusted

controllers/admin/users.controller.js

@@ -19,6 +19,7 @@
  * Author: rgrgogu
  * Date Created: Oct. 6, 2025
  ***********************************************************************************************************************************************************************/
+const sequelize = require('../../config/db.config')
 const { Op, Sequelize } = require('sequelize')
 const mdl_Users = require('../../models/users/users.mdl');
 const mdl_UserSessions = require('../../models/users/user_sessions.mdl');
@@ -32,14 +33,15 @@ const { excludeAttributes: usersExclude, jsonbSchemas: usersSchemas } = require(
 const { excludeAttributes: groupExclude, jsonbSchemas: groupSchemas } = require('../../models/users/user_groups.attributes');
 
 const EXCLUDED = ['password', 'otp_code', 'otp_expires_at'];
+const auditByFields = ['createdBy', 'updatedBy', 'deletedBy'];
 
 exports.getUsers = async (req, res) => {
   try {
     const result = await paginate(mdl_Users, req, {
       excludeAttributes: usersExclude,
-      jsonbSchemas:      usersSchemas,
-      jsonbColumn:       'personal_info',
-      auditOptions:      { mdl_Users, parentAlias: 'User' },
+      jsonbSchemas: usersSchemas,
+      jsonbColumn: 'personal_info',
+      auditOptions: { mdl_Users, parentAlias: 'User' },
     });
 
     return R.success(res, 'Users retrieved.', result);
@@ -154,8 +156,8 @@ exports.getGroups = async (req, res) => {
   try {
     const result = await paginate(mdl_UserGroups, req, {
       excludeAttributes: groupExclude,
-      jsonbSchemas:      groupSchemas,
-      auditOptions:      { mdl_Users, parentAlias: 'UserGroup' },
+      jsonbSchemas: groupSchemas,
+      auditOptions: { mdl_Users, parentAlias: 'UserGroup' },
       findOptions: {
         attributes: {
           include: [
@@ -186,14 +188,14 @@ exports.getGroup = async (req, res) => {
 
     const members = await paginate(mdl_Users, req, {
       excludeAttributes: usersExclude,
-      jsonbSchemas:      usersSchemas,
-      jsonbColumn:       'personal_info',
-      auditOptions:      { mdl_Users, parentAlias: 'User' },
+      jsonbSchemas: usersSchemas,
+      jsonbColumn: 'personal_info',
+      auditOptions: { mdl_Users, parentAlias: 'User' },
       findOptions: {
         include: [
           {
-            model:    mdl_UserGroupMembers,
-            where:    { group_id: req.params.gid },
+            model: mdl_UserGroupMembers,
+            where: { group_id: req.params.gid },
             attributes: [],
             required: true,
           },
@@ -443,4 +445,83 @@ exports.terminateSession = async (req, res) => {
   } catch (err) {
     return R.error(res, 'Could not terminate session.', 500);
   }
+};
+
+exports.getUserFieldValues = async (req, res) => {
+  try {
+    const { field } = req.query;
+    if (!field) return R.error(res, 'Field is required.', 400);
+
+    const allowedFields = Object.keys(mdl_Users.rawAttributes).filter(
+      f => !['password', 'otp_code', 'otp_expires_at', 'personal_info'].includes(f)
+    );
+
+    const dateFields = ['createdAt', 'updatedAt', 'deletedAt', 'modifiedAt'];
+
+    if (!field.includes('.')) {
+      if (!allowedFields.includes(field))
+        return R.error(res, 'Invalid or restricted field.', 400);
+
+      // ─── Audit By fields — return names instead of IDs ───────────────────
+      if (auditByFields.includes(field)) {
+        const [rows] = await sequelize.query(`
+            SELECT DISTINCT u2."personal_info"->'name'->>'full_name' AS value
+            FROM users u1
+            JOIN users u2 ON u2.user_id = u1."${field}"
+            WHERE u1."${field}" IS NOT NULL
+              AND u2."personal_info"->'name'->>'full_name' IS NOT NULL
+            ORDER BY value ASC
+        `);
+
+        const values = rows.map(r => r.value).filter(Boolean);
+        return R.success(res, 'Field values retrieved.', values);
+      }
+
+      // ─── Date fields ──────────────────────────────────────────────────────
+      if (dateFields.includes(field)) {
+        const results = await mdl_Users.findAll({
+          attributes: [
+            [Sequelize.fn('DISTINCT', Sequelize.fn('DATE', Sequelize.col(field))), 'value'],
+          ],
+          where: { [field]: { [Op.ne]: null } },
+          order: [[Sequelize.fn('DATE', Sequelize.col(field)), 'DESC']],
+          raw: true,
+        });
+
+        const values = results.map(r => r.value).filter(Boolean);
+        return R.success(res, 'Field values retrieved.', values);
+      }
+
+      // ─── Regular fields ───────────────────────────────────────────────────
+      const results = await mdl_Users.findAll({
+        attributes: [[Sequelize.fn('DISTINCT', Sequelize.col(field)), 'value']],
+        where: { [field]: { [Op.ne]: null } },
+        raw: true,
+      });
+
+      const values = results.map(r => r.value).filter(Boolean).sort();
+      return R.success(res, 'Field values retrieved.', values);
+    }
+
+    // ─── JSONB dot-notation fields ─────────────────────────────────────────
+    const [column, ...pathParts] = field.split('.');
+    const keys = [...pathParts];
+    const lastKey = keys.pop();
+    const jsonbPath = keys.length
+      ? `"${column}"->${keys.map(k => `'${k}'`).join('->')}->>'${lastKey}'`
+      : `"${column}"->>'${lastKey}'`;
+
+    const results = await mdl_Users.findAll({
+      attributes: [[Sequelize.literal(`DISTINCT ${jsonbPath}`), 'value']],
+      where: Sequelize.literal(`${jsonbPath} IS NOT NULL`),
+      raw: true,
+    });
+
+    const values = results.map(r => r.value).filter(Boolean).sort();
+    return R.success(res, 'Field values retrieved.', values);
+
+  } catch (err) {
+    console.error('[ADMIN][GET USER FIELD VALUES]', err);
+    return R.error(res, 'Could not retrieve field values.', 500);
+  }
 };