[#2579] Validate columns on ProcedurePresentation model

app/models/procedure_presentation.rb

@@ -1,3 +1,45 @@
 class ProcedurePresentation < ApplicationRecord
   belongs_to :assign_to
+
+  delegate :procedure, to: :assign_to
+
+  validate :check_allowed_displayed_fields
+  validate :check_allowed_sort_column
+  validate :check_allowed_filter_columns
+
+  def check_allowed_displayed_fields
+    displayed_fields.each do |field|
+      table = field['table']
+      column = field['column']
+      if !DossierFieldService.valid_column?(procedure, table, column)
+        errors.add(:filters, "#{table}.#{column} n’est pas une colonne permise")
+      end
+    end
+  end
+
+  def check_allowed_sort_column
+    table = sort['table']
+    column = sort['column']
+    if !valid_sort_column?(procedure, table, column)
+      errors.add(:sort, "#{table}.#{column} n’est pas une colonne permise")
+    end
+  end
+
+  def check_allowed_filter_columns
+    filters.each do |_, columns|
+      columns.each do |column|
+        table = column['table']
+        column = column['column']
+        if !DossierFieldService.valid_column?(procedure, table, column)
+          errors.add(:filters, "#{table}.#{column} n’est pas une colonne permise")
+        end
+      end
+    end
+  end
+
+  private
+
+  def valid_sort_column?(procedure, table, column)
+    DossierFieldService.valid_column?(procedure, table, column) || (table == 'notifications' && column == 'notifications')
+  end
 end