From 071627ccd429e37c58c0f13d25966013f6b878e5 Mon Sep 17 00:00:00 2001
From: dhanabalan <dhana@example.com>
Date: Sat, 27 Sep 2025 16:30:59 +0530
Subject: [PATCH] Add user validation in updateGR method to ensure scanned_by
 exists for the given plant

---
 app/Http/Controllers/PdfController.php | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/app/Http/Controllers/PdfController.php b/app/Http/Controllers/PdfController.php
index c1615b8..1877652 100644
--- a/app/Http/Controllers/PdfController.php
+++ b/app/Http/Controllers/PdfController.php
@@ -5,6 +5,7 @@ namespace App\Http\Controllers;
 use App\Models\GrMaster;
 use App\Models\Item;
 use App\Models\Plant;
+use App\Models\User;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Response;
 use Illuminate\Support\Facades\Storage;
@@ -91,6 +92,17 @@ class PdfController extends Controller
             ], 400);
         }
 
+        $user = User::where('plant_id', $plantId)
+            ->where('name', $data['scanned_by'])
+            ->first();
+
+        if (!$user) {
+            return response()->json([
+                'status_code' => 'ERROR',
+                'status_description' => "'{$data['scanned_by']}' not found for plant {$data['plant_code']}!"
+            ], 404);
+        }
+
         $itemCodes = array_column($data['item_codes'], 'item_code');
 
         $duplicateItemCodes = array_unique(array_diff_assoc($itemCodes, array_unique($itemCodes)));