feature/DEVSU-3000-add-endpoint-to-get-all-therapeutic-targets

app/middleware/acl.js

@@ -94,6 +94,10 @@ const SPECIAL_CASES = [
     PUT: [{name: 'admin'}, {name: 'manager'}, {name: 'appendix edit access'}],
     DELETE: [{name: 'admin'}, {name: 'manager'}, {name: 'appendix edit access'}],
   },
+  {
+    path: pathToRegexp('/api/therapeutic-targets'),
+    GET: [{name: 'admin'}],
+  },
   {
     path: pathToRegexp('/api/project'),
     POST: [{name: 'admin'}, {name: 'manager'}, {name: 'create project access'}],

app/routes/index.js

@@ -20,6 +20,7 @@ const variantTextRoute = require('./variantText');
 const templateRoute = require('./template');
 const appendixRoute = require('./appendix');
 const legendRoute = require('./legend');
+const therapeuticTargetsRoute = require('./therapeuticTargets');
 
 // Get module route files
 const RouterInterface = require('./routingInterface');
@@ -105,6 +106,9 @@ class Routing extends RouterInterface {
     // Global legend routes
     this.router.use('/legend', legendRoute);
 
+    // Get therapeutic targets routes (all reports)
+    this.router.use('/therapeutic-targets', therapeuticTargetsRoute);
+
     return true;
   }
 }

app/routes/swagger/swagger.json

@@ -2187,6 +2187,41 @@
         }
       }
     },
+    "/therapeutic-targets": {
+      "get": {
+        "summary": "Get All Therapeutic Targets",
+        "description": "Returns all therapeutic targets across all reports. Admin only.",
+        "tags": [
+          "Therapeutic Targets"
+        ],
+        "security": [
+          {
+            "basicAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Returns all therapeutic targets across all reports",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/therapeuticTargetAssociations"
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/UnauthorizedError"
+          },
+          "403": {
+            "description": "User does not have permission to access this endpoint (admin only)"
+          }
+        }
+      }
+    },
     "/project/{project}/therapeutic-targets": {
       "get": {
         "summary": "Get All Therapeutic Targets For a Project",

app/routes/therapeuticTargets.js

@@ -0,0 +1,32 @@
+const HTTP_STATUS = require('http-status-codes');
+const express = require('express');
+
+const db = require('../models');
+const logger = require('../log');
+
+const router = express.Router({mergeParams: true});
+
+// Get all therapeutic targets across all reports (admin only, enforced in ACL middleware)
+router.route('/')
+  .get(async (req, res) => {
+    try {
+      const results = await db.models.therapeuticTarget.scope('public').findAll({
+        order: [['reportId', 'ASC'], ['rank', 'ASC']],
+        include: [
+          {
+            model: db.models.report,
+            as: 'report',
+            attributes: ['ident'],
+          },
+        ],
+      });
+      return res.json(results);
+    } catch (error) {
+      logger.error(`Unable to retrieve therapeutic targets ${error}`);
+      return res.status(HTTP_STATUS.INTERNAL_SERVER_ERROR).json({
+        error: {message: 'Unable to retrieve therapeutic targets'},
+      });
+    }
+  });
+
+module.exports = router;