Improve the frontend modals

services/orders/app/api/customers.py

@@ -75,9 +75,6 @@ async def create_customer(
 ):
     """Create a new customer"""
     try:
-        # Ensure tenant_id matches
-        customer_data.tenant_id = tenant_id
-
         # Check if customer code already exists
         existing_customer = await orders_service.customer_repo.get_by_customer_code(
             db, customer_data.customer_code, tenant_id
@@ -88,12 +85,25 @@ async def create_customer(
                 detail="Customer code already exists"
             )
 
+        # Extract user ID safely
+        user_id = current_user.get("user_id")
+        if not user_id:
+            logger.error("User ID not found in current_user context", current_user_keys=list(current_user.keys()))
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail="User authentication error"
+            )
+        
         customer = await orders_service.customer_repo.create(
             db,
-            obj_in=customer_data.dict(),
-            created_by=UUID(current_user["sub"])
+            obj_in=customer_data,
+            created_by=UUID(user_id),
+            tenant_id=tenant_id
         )
 
+        # Commit the transaction to persist changes
+        await db.commit()
+
         logger.info("Customer created successfully",
                    customer_id=str(customer.id),
                    customer_code=customer.customer_code)
@@ -202,13 +212,25 @@ async def update_customer(
             )
 
         # Update customer
+        # Extract user ID safely for update
+        user_id = current_user.get("user_id")
+        if not user_id:
+            logger.error("User ID not found in current_user context for update", current_user_keys=list(current_user.keys()))
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail="User authentication error"
+            )
+
         updated_customer = await orders_service.customer_repo.update(
             db,
             db_obj=customer,
             obj_in=customer_data.dict(exclude_unset=True),
-            updated_by=UUID(current_user["sub"])
+            updated_by=UUID(user_id)
         )
 
+        # Commit the transaction to persist changes
+        await db.commit()
+
         logger.info("Customer updated successfully",
                    customer_id=str(customer_id))
 
@@ -262,6 +284,9 @@ async def delete_customer(
 
         await orders_service.customer_repo.delete(db, customer_id, tenant_id)
 
+        # Commit the transaction to persist deletion
+        await db.commit()
+
         # Log HIGH severity audit event for customer deletion (GDPR compliance)
         try:
             await audit_logger.log_deletion(

services/orders/app/api/orders.py

@@ -76,15 +76,24 @@ async def create_order(
 ):
     """Create a new customer order"""
     try:
-        # Ensure tenant_id matches
-        order_data.tenant_id = tenant_id
+        # Extract user ID safely
+        user_id = current_user.get("user_id")
+        if not user_id:
+            logger.error("User ID not found in current_user context", current_user_keys=list(current_user.keys()))
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail="User authentication error"
+            )
 
         order = await orders_service.create_order(
             db,
             order_data,
-            user_id=UUID(current_user["sub"])
+            user_id=UUID(user_id)
         )
 
+        # Commit the transaction to persist changes
+        await db.commit()
+
         logger.info("Order created successfully",
                    order_id=str(order.id),
                    order_number=order.order_number)
@@ -211,6 +220,9 @@ async def update_order(
             updated_by=UUID(current_user["sub"])
         )
 
+        # Commit the transaction to persist changes
+        await db.commit()
+
         logger.info("Order updated successfully",
                    order_id=str(order_id))
 
@@ -260,6 +272,9 @@ async def delete_order(
 
         await orders_service.order_repo.delete(db, order_id, tenant_id)
 
+        # Commit the transaction to persist deletion
+        await db.commit()
+
         # Log audit event for order deletion
         try:
             await audit_logger.log_deletion(
@@ -290,4 +305,4 @@ async def delete_order(
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
             detail="Failed to delete order"
-        )
+        )