continued the kita-planer

src/app/dashboard/erzieher/actions.ts

@@ -8,13 +8,17 @@ import { requireRole } from "@/lib/auth-utils";
 import { prisma } from "@/lib/prisma";
 
 const educatorSchema = z.object({
-  firstName: z.string().min(1, "Vorname ist erforderlich"),
-  lastName: z.string().min(1, "Nachname ist erforderlich"),
+  firstName: z.string().min(1, "Vorname ist erforderlich").max(100).trim(),
+  lastName: z.string().min(1, "Nachname ist erforderlich").max(100).trim(),
   active: z.boolean().default(true),
 });
 
 export async function createEducator(rawPayload: unknown) {
   const session = await requireRole([UserRole.ADMIN]);
+  const kitaId = session.user.kitaId;
+  if (!kitaId) {
+    return { error: "Kein Mandant zugeordnet." };
+  }
   
   const parsed = educatorSchema.safeParse(rawPayload);
   if (!parsed.success) {
@@ -24,7 +28,7 @@ export async function createEducator(rawPayload: unknown) {
   try {
     await prisma.educator.create({
       data: {
-        kitaId: session.user.kitaId!,
+        kitaId,
         firstName: parsed.data.firstName,
         lastName: parsed.data.lastName,
         active: parsed.data.active,
@@ -41,6 +45,10 @@ export async function createEducator(rawPayload: unknown) {
 
 export async function updateEducator(id: string, rawPayload: unknown) {
   const session = await requireRole([UserRole.ADMIN]);
+  const kitaId = session.user.kitaId;
+  if (!kitaId) {
+    return { error: "Kein Mandant zugeordnet." };
+  }
   
   const parsed = educatorSchema.safeParse(rawPayload);
   if (!parsed.success) {
@@ -51,7 +59,7 @@ export async function updateEducator(id: string, rawPayload: unknown) {
     await prisma.educator.update({
       where: {
         id,
-        kitaId: session.user.kitaId!,
+        kitaId,
       },
       data: {
         firstName: parsed.data.firstName,
@@ -70,12 +78,16 @@ export async function updateEducator(id: string, rawPayload: unknown) {
 
 export async function deleteEducator(id: string) {
   const session = await requireRole([UserRole.ADMIN]);
+  const kitaId = session.user.kitaId;
+  if (!kitaId) {
+    return { error: "Kein Mandant zugeordnet." };
+  }
   
   try {
     await prisma.educator.delete({
       where: {
         id,
-        kitaId: session.user.kitaId!,
+        kitaId,
       },
     });