Suppliers API - Inventario

Overview

The Suppliers API manages supplier (proveedor) records for purchase order management.

Proveedor Model (Supplier)

integer

Unique supplier identifier (auto-generated)

integer

Foreign key to User (admin who created the supplier)

string

Supplier contact name (max 100 characters, required)

string

Company name (max 150 characters, required)

string

Phone number (max 20 characters, required)

Email address (required)

string

Physical address (max 200 characters, required)

datetime

Registration timestamp (auto-generated)

List Suppliers

Requires authentication. Returns suppliers owned by the authenticated user (admin) or their creator (vendedor).

curl -X GET http://localhost:8000/proveedores/ \
  -H "Cookie: sessionid=<your-session>"

Response

Returns rendered HTML template with list of suppliers sorted by name.

Create Supplier

Requires authentication and admin role.

curl -X POST http://localhost:8000/proveedores/crear/ \
  -H "Cookie: sessionid=<session>; csrftoken=<token>" \
  -H "X-CSRFToken: <token>" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "nombre=Juan Martinez" \
  -d "empresa=TechSupply S.A." \
  -d "telefono=6012345678" \
  -d "correo=contacto@techsupply.com" \
  -d "direccion=Calle 100 #15-20, Bogota"

Request Parameters

string

required

Supplier contact name (max 100 characters)

string

required

Company name (max 150 characters)

string

required

Phone number (max 20 characters)

required

Valid email address

string

required

Physical address (max 200 characters)

Response

Success (HTTP 302):

Redirects to /proveedores/
Flash message: “Proveedor agregado correctamente.”

Validation Error (HTTP 200):

Re-renders form with error messages
Flash message: “Revisa los campos marcados en el formulario.”

Permission Denied (HTTP 403):

Redirects to error page (vendedor users cannot create suppliers)

Validation Rules

All fields are required
correo must be valid email format
telefono max 20 characters
direccion max 200 characters

Update Supplier

Requires authentication and admin role. Only the supplier owner can update.

curl -X POST http://localhost:8000/proveedores/editar/<id>/ \
  -H "Cookie: sessionid=<session>; csrftoken=<token>" \
  -H "X-CSRFToken: <token>" \
  -d "nombre=Juan Martinez" \
  -d "empresa=TechSupply Colombia S.A." \
  -d "telefono=6019876543" \
  -d "correo=ventas@techsupply.com" \
  -d "direccion=Calle 101 #16-30, Bogota"

URL Parameters

integer

required

Supplier ID to update

Request Parameters

Same as Create Supplier - all fields are editable.

Response

Success (HTTP 302):

Redirects to /proveedores/
Flash message: “Proveedor actualizado correctamente.”

Not Found (HTTP 404):

Supplier doesn’t exist or doesn’t belong to authenticated user

Validation Error (HTTP 200):

Re-renders form with error messages

Delete Supplier

Requires authentication and admin role. Can delete suppliers even if referenced in purchases (SET_NULL constraint).

curl -X POST http://localhost:8000/proveedores/eliminar/<id>/ \
  -H "Cookie: sessionid=<session>; csrftoken=<token>" \
  -H "X-CSRFToken: <token>"

URL Parameters

integer

required

Supplier ID to delete

Response

Success (HTTP 302):

Supplier deleted
Associated purchases have proveedor field set to NULL
Redirects to /proveedores/
Flash message: “Proveedor eliminado correctamente.”

Not Found (HTTP 404):

Supplier doesn’t exist or doesn’t belong to user

GET Request

Accessing the delete URL via GET shows confirmation page:

curl http://localhost:8000/proveedores/eliminar/<id>/

Renders confirmation template.

Business Logic

Relationship with Purchases

Suppliers are linked to purchases via SET_NULL foreign key:

proveedor = models.ForeignKey(
    Proveedor,
    on_delete=models.SET_NULL,  # Allows deletion
    null=True,
    blank=True
)

When a supplier is deleted:

Purchase records are preserved
proveedor field set to NULL
Purchase history remains intact

Multi-Tenancy

Suppliers are isolated per user:

Admin users see only their own suppliers
Vendedor users see suppliers owned by their creado_por admin
Enforced at database level: usuario foreign key
Enforced in views: Proveedor.objects.filter(usuario=request.user)

Ordering

Suppliers are always returned sorted alphabetically by name:

class Meta:
    ordering = ['nombre']

Example Workflow

Complete Supplier Management

# 1. Login as admin
curl -c cookies.txt -X POST http://localhost:8000/login/ \
  -d "username=admin&password=mypass"

# 2. Create new supplier
curl -b cookies.txt -X POST http://localhost:8000/proveedores/crear/ \
  -H "X-CSRFToken: $(get_csrf_token)" \
  -d "nombre=Ana Rodriguez" \
  -d "empresa=OfficeMax Colombia" \
  -d "telefono=3101234567" \
  -d "correo=ana.rodriguez@officemax.co" \
  -d "direccion=Carrera 7 #32-45, Bogota"

# 3. View all suppliers
curl -b cookies.txt http://localhost:8000/proveedores/

# 4. Update supplier information
curl -b cookies.txt -X POST http://localhost:8000/proveedores/editar/5/ \
  -H "X-CSRFToken: $(get_csrf_token)" \
  -d "telefono=3109876543"  # Update phone only

# 5. Create purchase order with this supplier
curl -b cookies.txt -X POST http://localhost:8000/compras/crear/ \
  -H "X-CSRFToken: $(get_csrf_token)" \
  -d "tipo=productos" \
  -d "proveedor=5" \
  -d "total=5000.00"

# 6. Delete supplier (purchase proveedor field becomes NULL)
curl -b cookies.txt -X POST http://localhost:8000/proveedores/eliminar/5/ \
  -H "X-CSRFToken: $(get_csrf_token)"

# Purchase record still exists but without supplier reference

Supplier Data Export Example

# Get supplier list for export (requires custom view)
curl -b cookies.txt http://localhost:8000/proveedores/ \
  | grep -E '(nombre|empresa|telefono)' \
  > suppliers_export.html

Purchases API - Create purchase orders with suppliers
See source: applications/proveedores/models.py and applications/proveedores/views.py
- Model definition: /home/daytona/workspace/source/applications/proveedores/models.py
- View logic: /home/daytona/workspace/source/applications/proveedores/views.py
- URL routing: /home/daytona/workspace/source/applications/proveedores/urls.py

Field Constraints Summary

Field	Type	Max Length	Required	Unique
nombre	string	100	Yes	No
empresa	string	150	Yes	No
telefono	string	20	Yes	No
correo	email	254	Yes	No
direccion	string	200	Yes	No
usuario	foreign key	-	Yes	No

Permission Matrix

Action	Admin	Vendedor
List suppliers	Yes (own)	Yes (admin’s)
Create supplier	Yes	No
Update supplier	Yes (own)	No
Delete supplier	Yes (own)	No
View in purchases	Yes	Read-only

​Overview

​Proveedor Model (Supplier)

​List Suppliers

​Response

​Create Supplier

​Request Parameters

​Response

​Validation Rules

​Update Supplier

​URL Parameters

​Request Parameters

​Response

​Delete Supplier

​URL Parameters

​Response

​GET Request

​Business Logic

​Relationship with Purchases

​Multi-Tenancy

​Ordering

​Example Workflow

​Complete Supplier Management

​Supplier Data Export Example

​Related Endpoints

​Field Constraints Summary

​Permission Matrix

Overview

Proveedor Model (Supplier)

List Suppliers

Response

Create Supplier

Request Parameters

Response

Validation Rules

Update Supplier

URL Parameters

Request Parameters

Response

Delete Supplier

URL Parameters

Response

GET Request

Business Logic

Relationship with Purchases

Multi-Tenancy

Ordering

Example Workflow

Complete Supplier Management

Supplier Data Export Example

Related Endpoints

Field Constraints Summary

Permission Matrix