Merge remote-tracking branch 'origin/develop'

app/Http/Controllers/Accessories/AccessoriesFilesController.php

@@ -0,0 +1,177 @@
+<?php
+
+namespace App\Http\Controllers\Accessories;
+
+use App\Helpers\StorageHelper;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\AssetFileRequest;
+use App\Models\Actionlog;
+use App\Models\Accessory;
+use Illuminate\Support\Facades\Response;
+use Illuminate\Support\Facades\Storage;
+use Symfony\Accessory\HttpFoundation\JsonResponse;
+use enshrined\svgSanitize\Sanitizer;
+
+class AccessoriesFilesController extends Controller
+{
+    /**
+     * Validates and stores files associated with a accessory.
+     *
+     * @todo Switch to using the AssetFileRequest form request validator.
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.0]
+     * @param AssetFileRequest $request
+     * @param int $accessoryId
+     * @return \Illuminate\Http\RedirectResponse
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function store(AssetFileRequest $request, $accessoryId = null)
+    {
+        $accessory = Accessory::find($accessoryId);
+
+        if (isset($accessory->id)) {
+            $this->authorize('update', $accessory);
+
+            if ($request->hasFile('file')) {
+                if (! Storage::exists('private_uploads/accessories')) {
+                    Storage::makeDirectory('private_uploads/accessories', 775);
+                }
+
+                foreach ($request->file('file') as $file) {
+
+                    $extension = $file->getClientOriginalExtension();
+                    $file_name = 'accessory-'.$accessory->id.'-'.str_random(8).'-'.str_slug(basename($file->getClientOriginalName(), '.'.$extension)).'.'.$extension;
+
+
+                    // Check for SVG and sanitize it
+                    if ($extension == 'svg') {
+                        \Log::debug('This is an SVG');
+                        \Log::debug($file_name);
+
+                        $sanitizer = new Sanitizer();
+                        $dirtySVG = file_get_contents($file->getRealPath());
+                        $cleanSVG = $sanitizer->sanitize($dirtySVG);
+
+                        try {
+                            Storage::put('private_uploads/accessories/'.$file_name, $cleanSVG);
+                        } catch (\Exception $e) {
+                            \Log::debug('Upload no workie :( ');
+                            \Log::debug($e);
+                        }
+
+                    } else {
+                        Storage::put('private_uploads/accessories/'.$file_name, file_get_contents($file));
+                    }
+
+                    //Log the upload to the log
+                    $accessory->logUpload($file_name, e($request->input('notes')));
+                }
+
+
+                return redirect()->route('accessories.show', $accessory->id)->with('success', trans('general.file_upload_success'));
+
+            }
+
+            return redirect()->route('accessories.show', $accessory->id)->with('error', trans('general.no_files_uploaded'));
+        }
+        // Prepare the error message
+        return redirect()->route('accessories.index')
+            ->with('error', trans('general.file_does_not_exist'));
+    }
+
+    /**
+     * Deletes the selected accessory file.
+     *
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.0]
+     * @param int $accessoryId
+     * @param int $fileId
+     * @return \Illuminate\Http\RedirectResponse
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function destroy($accessoryId = null, $fileId = null)
+    {
+        $accessory = Accessory::find($accessoryId);
+
+        // the asset is valid
+        if (isset($accessory->id)) {
+            $this->authorize('update', $accessory);
+            $log = Actionlog::find($fileId);
+
+            // Remove the file if one exists
+            if (Storage::exists('accessories/'.$log->filename)) {
+                try {
+                    Storage::delete('accessories/'.$log->filename);
+                } catch (\Exception $e) {
+                    \Log::debug($e);
+                }
+            }
+
+            $log->delete();
+
+            return redirect()->back()
+                ->with('success', trans('admin/hardware/message.deletefile.success'));
+        }
+
+        // Redirect to the licence management page
+        return redirect()->route('accessories.index')->with('error', trans('general.file_does_not_exist'));
+    }
+
+    /**
+     * Allows the selected file to be viewed.
+     *
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.4]
+     * @param int $accessoryId
+     * @param int $fileId
+     * @return \Symfony\Accessory\HttpFoundation\Response
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function show($accessoryId = null, $fileId = null, $download = true)
+    {
+        \Log::debug('Private filesystem is: '.config('filesystems.default'));
+        $accessory = Accessory::find($accessoryId);
+
+        // the accessory is valid
+        if (isset($accessory->id)) {
+            $this->authorize('view', $accessory);
+            $this->authorize('accessories.files', $accessory);
+
+            if (! $log = Actionlog::find($fileId)) {
+                return response('No matching record for that asset/file', 500)
+                    ->header('Content-Type', 'text/plain');
+            }
+
+            $file = 'private_uploads/accessories/'.$log->filename;
+
+            if (Storage::missing($file)) {
+                \Log::debug('FILE DOES NOT EXISTS for '.$file);
+                \Log::debug('URL should be '.Storage::url($file));
+
+                return response('File '.$file.' ('.Storage::url($file).') not found on server', 404)
+                    ->header('Content-Type', 'text/plain');
+            } else {
+
+                // We have to override the URL stuff here, since local defaults in Laravel's Flysystem
+                // won't work, as they're not accessible via the web
+                if (config('filesystems.default') == 'local') { // TODO - is there any way to fix this at the StorageHelper layer?
+                    return StorageHelper::downloader($file);
+                } else {
+                    if ($download != 'true') {
+                        \Log::debug('display the file');
+                        if ($contents = file_get_contents(Storage::url($file))) { // TODO - this will fail on private S3 files or large public ones
+                            return Response::make(Storage::url($file)->header('Content-Type', mime_content_type($file)));
+                        }
+
+                        return JsonResponse::create(['error' => 'Failed validation: '], 500);
+                    }
+
+                    return StorageHelper::downloader($file);
+
+                }
+            }
+        }
+
+        return redirect()->route('accessories.index')->with('error', trans('general.file_does_not_exist', ['id' => $fileId]));
+    }
+}

app/Http/Controllers/Api/ConsumablesController.php

@@ -228,6 +228,7 @@ class ConsumablesController extends Controller
 
         foreach ($consumable->consumableAssignments as $consumable_assignment) {
             $rows[] = [
+                'avatar' => ($consumable_assignment->user) ? e($consumable_assignment->user->present()->gravatar) : '',
                 'name' => ($consumable_assignment->user) ? $consumable_assignment->user->present()->nameUrl() : 'Deleted User',
                 'created_at' => Helper::getFormattedDateObject($consumable_assignment->created_at, 'datetime'),
                 'note' => ($consumable_assignment->note) ? e($consumable_assignment->note) : null,

app/Http/Controllers/Components/ComponentsFilesController.php

@@ -0,0 +1,175 @@
+<?php
+
+namespace App\Http\Controllers\Components;
+
+use App\Helpers\StorageHelper;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\AssetFileRequest;
+use App\Models\Actionlog;
+use App\Models\Component;
+use Illuminate\Support\Facades\Response;
+use Illuminate\Support\Facades\Storage;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use enshrined\svgSanitize\Sanitizer;
+
+class ComponentsFilesController extends Controller
+{
+    /**
+     * Validates and stores files associated with a component.
+     *
+     * @todo Switch to using the AssetFileRequest form request validator.
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.0]
+     * @param AssetFileRequest $request
+     * @param int $componentId
+     * @return \Illuminate\Http\RedirectResponse
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function store(AssetFileRequest $request, $componentId = null)
+    {
+        $component = Component::find($componentId);
+
+        if (isset($component->id)) {
+            $this->authorize('update', $component);
+
+            if ($request->hasFile('file')) {
+                if (! Storage::exists('private_uploads/components')) {
+                    Storage::makeDirectory('private_uploads/components', 775);
+                }
+
+                foreach ($request->file('file') as $file) {
+
+                    $extension = $file->getClientOriginalExtension();
+                    $file_name = 'component-'.$component->id.'-'.str_random(8).'-'.str_slug(basename($file->getClientOriginalName(), '.'.$extension)).'.'.$extension;
+
+
+                    // Check for SVG and sanitize it
+                    if ($extension == 'svg') {
+                        \Log::debug('This is an SVG');
+                        \Log::debug($file_name);
+
+                        $sanitizer = new Sanitizer();
+                        $dirtySVG = file_get_contents($file->getRealPath());
+                        $cleanSVG = $sanitizer->sanitize($dirtySVG);
+
+                        try {
+                            Storage::put('private_uploads/components/'.$file_name, $cleanSVG);
+                        } catch (\Exception $e) {
+                            \Log::debug('Upload no workie :( ');
+                            \Log::debug($e);
+                        }
+
+                    } else {
+                        Storage::put('private_uploads/components/'.$file_name, file_get_contents($file));
+                    }
+
+                    //Log the upload to the log
+                    $component->logUpload($file_name, e($request->input('notes')));
+                }
+
+
+                return redirect()->route('components.show', $component->id)->with('success', trans('general.file_upload_success'));
+
+            }
+
+            return redirect()->route('components.show', $component->id)->with('error', trans('general.no_files_uploaded'));
+        }
+        // Prepare the error message
+        return redirect()->route('components.index')
+            ->with('error', trans('general.file_does_not_exist'));
+    }
+
+    /**
+     * Deletes the selected component file.
+     *
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.0]
+     * @param int $componentId
+     * @param int $fileId
+     * @return \Illuminate\Http\RedirectResponse
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function destroy($componentId = null, $fileId = null)
+    {
+        $component = Component::find($componentId);
+
+        // the asset is valid
+        if (isset($component->id)) {
+            $this->authorize('update', $component);
+            $log = Actionlog::find($fileId);
+
+            // Remove the file if one exists
+            if (Storage::exists('components/'.$log->filename)) {
+                try {
+                    Storage::delete('components/'.$log->filename);
+                } catch (\Exception $e) {
+                    \Log::debug($e);
+                }
+            }
+
+            $log->delete();
+
+            return redirect()->back()
+                ->with('success', trans('admin/hardware/message.deletefile.success'));
+        }
+
+        // Redirect to the licence management page
+        return redirect()->route('components.index')->with('error', trans('general.file_does_not_exist'));
+    }
+
+    /**
+     * Allows the selected file to be viewed.
+     *
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.4]
+     * @param int $componentId
+     * @param int $fileId
+     * @return \Symfony\Component\HttpFoundation\Response
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function show($componentId = null, $fileId = null, $download = true)
+    {
+        \Log::debug('Private filesystem is: '.config('filesystems.default'));
+        $component = Component::find($componentId);
+
+        // the component is valid
+        if (isset($component->id)) {
+            $this->authorize('view', $component);
+            $this->authorize('components.files', $component);
+
+            if (! $log = Actionlog::find($fileId)) {
+                return response('No matching record for that asset/file', 500)
+                    ->header('Content-Type', 'text/plain');
+            }
+
+            $file = 'private_uploads/components/'.$log->filename;
+
+            if (Storage::missing($file)) {
+                \Log::debug('FILE DOES NOT EXISTS for '.$file);
+                \Log::debug('URL should be '.Storage::url($file));
+
+                return response('File '.$file.' ('.Storage::url($file).') not found on server', 404)
+                    ->header('Content-Type', 'text/plain');
+            } else {
+
+                if (config('filesystems.default') == 'local') { // TODO - is there any way to fix this at the StorageHelper layer?
+                    return StorageHelper::downloader($file);
+                } else {
+                    if ($download != 'true') {
+                        \Log::debug('display the file');
+                        if ($contents = file_get_contents(Storage::url($file))) { // TODO - this will fail on private S3 files or large public ones
+                            return Response::make(Storage::url($file)->header('Content-Type', mime_content_type($file)));
+                        }
+
+                        return JsonResponse::create(['error' => 'Failed validation: '], 500);
+                    }
+
+                    return StorageHelper::downloader($file);
+
+                }
+            }
+        }
+
+        return redirect()->route('components.index')->with('error', trans('general.file_does_not_exist', ['id' => $fileId]));
+    }
+}

app/Http/Controllers/Consumables/ConsumablesFilesController.php

@@ -0,0 +1,176 @@
+<?php
+
+namespace App\Http\Controllers\Consumables;
+
+use App\Helpers\StorageHelper;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\AssetFileRequest;
+use App\Models\Actionlog;
+use App\Models\Consumable;
+use Illuminate\Support\Facades\Response;
+use Illuminate\Support\Facades\Storage;
+use Symfony\Consumable\HttpFoundation\JsonResponse;
+use enshrined\svgSanitize\Sanitizer;
+
+class ConsumablesFilesController extends Controller
+{
+    /**
+     * Validates and stores files associated with a consumable.
+     *
+     * @todo Switch to using the AssetFileRequest form request validator.
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.0]
+     * @param AssetFileRequest $request
+     * @param int $consumableId
+     * @return \Illuminate\Http\RedirectResponse
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function store(AssetFileRequest $request, $consumableId = null)
+    {
+        $consumable = Consumable::find($consumableId);
+
+        if (isset($consumable->id)) {
+            $this->authorize('update', $consumable);
+
+            if ($request->hasFile('file')) {
+                if (! Storage::exists('private_uploads/consumables')) {
+                    Storage::makeDirectory('private_uploads/consumables', 775);
+                }
+
+                foreach ($request->file('file') as $file) {
+
+                    $extension = $file->getClientOriginalExtension();
+                    $file_name = 'consumable-'.$consumable->id.'-'.str_random(8).'-'.str_slug(basename($file->getClientOriginalName(), '.'.$extension)).'.'.$extension;
+
+
+                    // Check for SVG and sanitize it
+                    if ($extension == 'svg') {
+                        \Log::debug('This is an SVG');
+                        \Log::debug($file_name);
+
+                        $sanitizer = new Sanitizer();
+                        $dirtySVG = file_get_contents($file->getRealPath());
+                        $cleanSVG = $sanitizer->sanitize($dirtySVG);
+
+                        try {
+                            Storage::put('private_uploads/consumables/'.$file_name, $cleanSVG);
+                        } catch (\Exception $e) {
+                            \Log::debug('Upload no workie :( ');
+                            \Log::debug($e);
+                        }
+
+                    } else {
+                        Storage::put('private_uploads/consumables/'.$file_name, file_get_contents($file));
+                    }
+
+                    //Log the upload to the log
+                    $consumable->logUpload($file_name, e($request->input('notes')));
+                }
+
+
+                return redirect()->route('consumables.show', $consumable->id)->with('success', trans('general.file_upload_success'));
+
+            }
+
+            return redirect()->route('consumables.show', $consumable->id)->with('error', trans('general.no_files_uploaded'));
+        }
+        // Prepare the error message
+        return redirect()->route('consumables.index')
+            ->with('error', trans('general.file_does_not_exist'));
+    }
+
+    /**
+     * Deletes the selected consumable file.
+     *
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.0]
+     * @param int $consumableId
+     * @param int $fileId
+     * @return \Illuminate\Http\RedirectResponse
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function destroy($consumableId = null, $fileId = null)
+    {
+        $consumable = Consumable::find($consumableId);
+
+        // the asset is valid
+        if (isset($consumable->id)) {
+            $this->authorize('update', $consumable);
+            $log = Actionlog::find($fileId);
+
+            // Remove the file if one exists
+            if (Storage::exists('consumables/'.$log->filename)) {
+                try {
+                    Storage::delete('consumables/'.$log->filename);
+                } catch (\Exception $e) {
+                    \Log::debug($e);
+                }
+            }
+
+            $log->delete();
+
+            return redirect()->back()
+                ->with('success', trans('admin/hardware/message.deletefile.success'));
+        }
+
+        // Redirect to the licence management page
+        return redirect()->route('consumables.index')->with('error', trans('general.file_does_not_exist'));
+    }
+
+    /**
+     * Allows the selected file to be viewed.
+     *
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.4]
+     * @param int $consumableId
+     * @param int $fileId
+     * @return \Symfony\Consumable\HttpFoundation\Response
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function show($consumableId = null, $fileId = null, $download = true)
+    {
+        $consumable = Consumable::find($consumableId);
+
+        // the consumable is valid
+        if (isset($consumable->id)) {
+            $this->authorize('view', $consumable);
+            $this->authorize('consumables.files', $consumable);
+
+            if (! $log = Actionlog::find($fileId)) {
+                return response('No matching record for that asset/file', 500)
+                    ->header('Content-Type', 'text/plain');
+            }
+
+            $file = 'private_uploads/consumables/'.$log->filename;
+
+            if (Storage::missing($file)) {
+                \Log::debug('FILE DOES NOT EXISTS for '.$file);
+                \Log::debug('URL should be '.Storage::url($file));
+
+                return response('File '.$file.' ('.Storage::url($file).') not found on server', 404)
+                    ->header('Content-Type', 'text/plain');
+            } else {
+
+                // We have to override the URL stuff here, since local defaults in Laravel's Flysystem
+                // won't work, as they're not accessible via the web
+                if (config('filesystems.default') == 'local') { // TODO - is there any way to fix this at the StorageHelper layer?
+                    return StorageHelper::downloader($file);
+                } else {
+                    if ($download != 'true') {
+                        \Log::debug('display the file');
+                        if ($contents = file_get_contents(Storage::url($file))) { // TODO - this will fail on private S3 files or large public ones
+                            return Response::make(Storage::url($file)->header('Content-Type', mime_content_type($file)));
+                        }
+
+                        return JsonResponse::create(['error' => 'Failed validation: '], 500);
+                    }
+
+                    return StorageHelper::downloader($file);
+
+                }
+            }
+        }
+
+        return redirect()->route('consumables.index')->with('error', trans('general.file_does_not_exist', ['id' => $fileId]));
+    }
+}

app/Models/Accessory.php

@@ -101,6 +101,23 @@ class Accessory extends SnipeModel
 
 
 
+    /**
+     * Establishes the accessories -> action logs -> uploads relationship
+     *
+     * @author A. Gianotto <snipe@snipe.net>
+     * @since [v6.1.13]
+     * @return \Illuminate\Database\Eloquent\Relations\Relation
+     */
+    public function uploads()
+    {
+        return $this->hasMany(\App\Models\Actionlog::class, 'item_id')
+            ->where('item_type', '=', self::class)
+            ->where('action_type', '=', 'uploaded')
+            ->whereNotNull('filename')
+            ->orderBy('created_at', 'desc');
+    }
+
+
     /**
      * Establishes the accessory -> supplier relationship
      *

app/Models/Component.php

@@ -88,6 +88,24 @@ class Component extends SnipeModel
         'location'     => ['name'],
     ];
 
+
+    /**
+     * Establishes the components -> action logs -> uploads relationship
+     *
+     * @author A. Gianotto <snipe@snipe.net>
+     * @since [v6.1.13]
+     * @return \Illuminate\Database\Eloquent\Relations\Relation
+     */
+    public function uploads()
+    {
+        return $this->hasMany(\App\Models\Actionlog::class, 'item_id')
+            ->where('item_type', '=', self::class)
+            ->where('action_type', '=', 'uploaded')
+            ->whereNotNull('filename')
+            ->orderBy('created_at', 'desc');
+    }
+
+
     /**
      * Establishes the component -> location relationship
      *

app/Models/Consumable.php

@@ -96,6 +96,24 @@ class Consumable extends SnipeModel
         'manufacturer' => ['name'],
     ];
 
+
+    /**
+     * Establishes the components -> action logs -> uploads relationship
+     *
+     * @author A. Gianotto <snipe@snipe.net>
+     * @since [v6.1.13]
+     * @return \Illuminate\Database\Eloquent\Relations\Relation
+     */
+    public function uploads()
+    {
+        return $this->hasMany(\App\Models\Actionlog::class, 'item_id')
+            ->where('item_type', '=', self::class)
+            ->where('action_type', '=', 'uploaded')
+            ->whereNotNull('filename')
+            ->orderBy('created_at', 'desc');
+    }
+
+
     /**
      * Sets the attribute of whether or not the consumable is requestable
      *

app/Models/SnipeSCIMConfig.php

@@ -41,8 +41,10 @@ class SnipeSCIMConfig extends \ArieTimmerman\Laravel\SCIMServer\SCIMConfig
             } 
         );
 
-        $config['validations'][$core.'externalId'] = 'string'; // not required, but supported mostly just for Okta
+        // externalId support
-        $mappings['externalId'] = AttributeMapping::eloquent('scim_externalid');
+        $config['validations'][$core.'externalId'] = 'string|nullable'; // not required, but supported mostly just for Okta
+        // note that the mapping is *not* namespaced like the other $mappings
+        $config['mapping']['externalId'] = AttributeMapping::eloquent('scim_externalid');
 
         $config['validations'][$core.'emails'] = 'nullable|array';         // emails are not required in Snipe-IT...
         $config['validations'][$core.'emails.*.value'] = 'email'; // ...(had to remove the recommended 'required' here)

app/Models/User.php

@@ -61,6 +61,7 @@ class User extends SnipeModel implements AuthenticatableContract, AuthorizableCo
         'remote',
         'start_date',
         'end_date',
+        'scim_externalid'
     ];
 
     protected $casts = [

config/permissions.php

@@ -145,6 +145,13 @@ return [
             'note'       => '',
             'display'    => true,
         ],
+        [
+            'permission' => 'accessories.files',
+            'label'      => 'View and Modify Accessory Files',
+            'note'       => '',
+            'display'    => true,
+        ],
+
     ],
 
     'Consumables' => [
@@ -178,6 +185,12 @@ return [
             'note'       => '',
             'display'    => true,
         ],
+        [
+            'permission' => 'consumables.files',
+            'label'      => 'View and Modify Consumable Files',
+            'note'       => '',
+            'display'    => true,
+        ],
     ],
 
 
@@ -264,6 +277,12 @@ return [
             'note'       => '',
             'display'    => true,
         ],
+        [
+            'permission' => 'components.files',
+            'label'      => 'View and Modify Component Files',
+            'note'       => '',
+            'display'    => true,
+        ],
 
     ],
 

resources/lang/en/general.php

@@ -280,6 +280,9 @@ return [
     'yes' 					=> 'Yes',
     'zip'  					=> 'Zip',
     'noimage'				=> 'No image uploaded or image not found.',
+    'file_does_not_exist'   => 'The requested file does not exist on the server.',
+    'file_upload_success'   => 'File upload success!',
+    'no_files_uploaded'     => 'File upload success!',
     'token_expired'         => 'Your form session has expired. Please try again.',
     'login_enabled'         => 'Login Enabled',
     'audit_due'             => 'Due for Audit',

resources/views/accessories/view.blade.php

@@ -46,65 +46,234 @@
 
 {{-- Page content --}}
 @section('content')
+    {{-- Page content --}}
+    <div class="row">
+        <div class="col-md-9">
 
-    <!-- Custom Tabs -->
+            <!-- Custom Tabs -->
-    <div class="nav-tabs-custom">
+            <div class="nav-tabs-custom">
+                <ul class="nav nav-tabs hidden-print">
 
-        <ul class="nav nav-tabs hidden-print">
+                    <li class="active">
+                        <a href="#checkedout" data-toggle="tab">
+                            <span class="hidden-lg hidden-md">
+                            <i class="fas fa-info-circle fa-2x" aria-hidden="true"></i>
+                            </span>
+                            <span class="hidden-xs hidden-sm">{{ trans('admin/users/general.info') }}</span>
+                        </a>
+                    </li>
 
-            <li class="active">
+                    <li>
-                <a href="#details" data-toggle="tab">
+                        <a href="#history" data-toggle="tab">
-                  <span class="hidden-lg hidden-md">
+                        <span class="hidden-lg hidden-md">
-                  <i class="fas fa-info-circle fa-2x"x></i>
+                        <i class="fas fa-history fa-2x" aria-hidden="true"></i></span>
-                  </span>
+                        <span class="hidden-xs hidden-sm">{{ trans('general.history') }}</span>
-                    <span class="hidden-xs hidden-sm">{{ trans('admin/users/general.info') }}</span>
+                        </a>
-                </a>
+                    </li>
-            </li>
+
-            <li>
+
-                <a href="#history" data-toggle="tab">
+                    @can('accessorys.files', $accessory)
+                        <li>
+                            <a href="#files" data-toggle="tab">
             <span class="hidden-lg hidden-md">
-            <i class="fas fa-history fa-2x" aria-hidden="true"></i></span>
+            <i class="far fa-file fa-2x" aria-hidden="true"></i></span>
-                    <span class="hidden-xs hidden-sm">{{ trans('general.history') }}</span>
+                                <span class="hidden-xs hidden-sm">{{ trans('general.file_uploads') }}
-                </a>
+                                    {!! ($accessory->uploads->count() > 0 ) ? '<badge class="badge badge-secondary">'.number_format($accessory->uploads->count()).'</badge>' : '' !!}
-            </li>
+            </span>
-        </ul>
+                            </a>
+                        </li>
+                    @endcan
+
+                    @can('update', Component::class)
+
+                        <li class="pull-right">
+                            <a href="#" data-toggle="modal" data-target="#uploadFileModal">
+                                <i class="fas fa-paperclip" aria-hidden="true"></i> {{ trans('button.upload') }}
+                            </a>
+                        </li>
+                    @endcan
+                </ul>
+
+                <div class="tab-content">
+
+                    <div class="tab-pane active" id="checkedout">
+                        <div class="table table-responsive">
+                          <div class="row">
+                              <div class="col-md-9">
+                                <table
+                                    data-cookie-id-table="usersTable"
+                                    data-pagination="true"
+                                    data-id-table="usersTable"
+                                    data-search="true"
+                                    data-side-pagination="server"
+                                    data-show-columns="true"
+                                    data-show-fullscreen="true"
+                                    data-show-export="true"
+                                    data-show-refresh="true"
+                                    data-sort-order="asc"
+                                    id="usersTable"
+                                    class="table table-striped snipe-table"
+                                    data-url="{{ route('api.accessories.checkedout', $accessory->id) }}"
+                                    data-export-options='{
+                                    "fileName": "export-accessories-{{ str_slug($accessory->name) }}-users-{{ date('Y-m-d') }}",
+                                    "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","icon"]
+                                    }'>
+                                <thead>
+                                    <tr>
+                                    <th data-searchable="false" data-formatter="usersLinkFormatter" data-sortable="false" data-field="name">{{ trans('general.user') }}</th>
+                                    <th data-searchable="false" data-sortable="false" data-field="checkout_notes">{{ trans('general.notes') }}</th>
+                                    <th data-searchable="false" data-formatter="dateDisplayFormatter" data-sortable="false" data-field="last_checkout">{{ trans('admin/hardware/table.checkout_date') }}</th>
+                                    <th data-searchable="false" data-sortable="false" data-field="actions" data-formatter="accessoriesInOutFormatter">{{ trans('table.actions') }}</th>
+                                    </tr>
+                                </thead>
+                                </table>
+                            </div><!--col-md-9-->
+                          </div> <!-- close tab-pane div -->
+                        </div>
+                    </div>
+
+                    <!-- histor tab pane -->
+                     <div class="tab-pane fade" id="history">
+                         <div class="table table-responsive">
+                             <div class="row">
+                                 <div class="col-md-9">
+                                <table
+                                        class="table table-striped snipe-table"
+                                        data-cookie-id-table="AccessoryHistoryTable"
+                                        data-id-table="AccessoryHistoryTable"
+                                        id="AccessoryHistoryTable"
+                                        data-pagination="true"
+                                        data-show-columns="true"
+                                        data-side-pagination="server"
+                                        data-show-refresh="true"
+                                        data-show-export="true"
+                                        data-sort-order="desc"
+                                        data-export-options='{
+                       "fileName": "export-{{ str_slug($accessory->name) }}-history-{{ date('Y-m-d') }}",
+                       "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","icon"]
+                     }'
+                                                data-url="{{ route('api.activity.index', ['item_id' => $accessory->id, 'item_type' => 'accessory']) }}">
+
+                                            <thead>
+                                            <tr>
+                                                <th class="col-sm-2" data-visible="false" data-sortable="true" data-field="created_at" data-formatter="dateDisplayFormatter">{{ trans('general.record_created') }}</th>
+                                                <th class="col-sm-2"data-visible="true" data-sortable="true" data-field="admin" data-formatter="usersLinkObjFormatter">{{ trans('general.admin') }}</th>
+                                                <th class="col-sm-2" data-sortable="true"  data-visible="true" data-field="action_type">{{ trans('general.action') }}</th>
+                                                <th class="col-sm-2" data-sortable="true"  data-visible="true" data-field="item" data-formatter="polymorphicItemFormatter">{{ trans('general.item') }}</th>
+                                                <th class="col-sm-2" data-visible="true" data-field="target" data-formatter="polymorphicItemFormatter">{{ trans('general.target') }}</th>
+                                                <th class="col-sm-2" data-sortable="true" data-visible="true" data-field="note">{{ trans('general.notes') }}</th>
+                                                <th class="col-sm-2" data-visible="true" data-field="action_date" data-formatter="dateDisplayFormatter">{{ trans('general.date') }}</th>
+                                                @if  ($snipeSettings->require_accept_signature=='1')
+                                                    <th class="col-md-3" data-field="signature_file" data-visible="false"  data-formatter="imageFormatter">{{ trans('general.signature') }}</th>
+                                                @endif
+                                            </tr>
+                                            </thead>
+                                        </table>
+                                    </div> <!-- /.col-md-12-->
+                                </div> <!-- /.row-->
+                            </div><!--tab history-->
+                     </div>
 
 
-    <div class="tab-content">
-      <div class="tab-pane fade in active" id="details">
-          <div class="row">
-              <div class="col-md-9">
-                <table
-                    data-cookie-id-table="usersTable"
-                    data-pagination="true"
-                    data-id-table="usersTable"
-                    data-search="true"
-                    data-side-pagination="server"
-                    data-show-columns="true"
-                    data-show-fullscreen="true"
-                    data-show-export="true"
-                    data-show-refresh="true"
-                    data-sort-order="asc"
-                    id="usersTable"
-                    class="table table-striped snipe-table"
-                    data-url="{{ route('api.accessories.checkedout', $accessory->id) }}"
-                    data-export-options='{
-                    "fileName": "export-accessories-{{ str_slug($accessory->name) }}-users-{{ date('Y-m-d') }}",
-                    "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","icon"]
-                    }'>
-                <thead>
-                    <tr>
-                    <th data-searchable="false" data-formatter="usersLinkFormatter" data-sortable="false" data-field="name">{{ trans('general.user') }}</th>
-                    <th data-searchable="false" data-sortable="false" data-field="checkout_notes">{{ trans('general.notes') }}</th>
-                    <th data-searchable="false" data-formatter="dateDisplayFormatter" data-sortable="false" data-field="last_checkout">{{ trans('admin/hardware/table.checkout_date') }}</th>
-                    <th data-searchable="false" data-sortable="false" data-field="actions" data-formatter="accessoriesInOutFormatter">{{ trans('table.actions') }}</th>
-                    </tr>
-                </thead>
 
-                </table>
+                    @can('accessorys.files', $accessory)
-            </div><!--col-md-9-->
+                        <div class="tab-pane" id="files">
 
+                            <div class="table table-responsive">
+                                <div class="row">
+                                    <div class="col-md-12">
+                                <table
+                                        data-cookie-id-table="accessoryUploadsTable"
+                                        data-id-table="accessoryUploadsTable"
+                                        id="accessoryUploadsTable"
+                                        data-search="true"
+                                        data-pagination="true"
+                                        data-side-pagination="client"
+                                        data-show-columns="true"
+                                        data-show-export="true"
+                                        data-show-footer="true"
+                                        data-toolbar="#upload-toolbar"
+                                        data-show-refresh="true"
+                                        data-sort-order="asc"
+                                        data-sort-name="name"
+                                        class="table table-striped snipe-table"
+                                        data-export-options='{
+            "fileName": "export-accessorys-uploads-{{ str_slug($accessory->name) }}-{{ date('Y-m-d') }}",
+            "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","delete","download","icon"]
+            }'>
+                                    <thead>
+                                    <tr>
+                                        <th data-visible="true" data-field="icon" data-sortable="true">{{trans('general.file_type')}}</th>
+                                        <th class="col-md-2" data-searchable="true" data-visible="true" data-field="image">{{ trans('general.image') }}</th>
+                                        <th class="col-md-2" data-searchable="true" data-visible="true" data-field="filename" data-sortable="true">{{ trans('general.file_name') }}</th>
+                                        <th class="col-md-1" data-searchable="true" data-visible="true" data-field="filesize">{{ trans('general.filesize') }}</th>
+                                        <th class="col-md-2" data-searchable="true" data-visible="true" data-field="notes" data-sortable="true">{{ trans('general.notes') }}</th>
+                                        <th class="col-md-1" data-searchable="true" data-visible="true" data-field="download">{{ trans('general.download') }}</th>
+                                        <th class="col-md-2" data-searchable="true" data-visible="true" data-field="created_at" data-sortable="true">{{ trans('general.created_at') }}</th>
+                                        <th class="col-md-1" data-searchable="true" data-visible="true" data-field="actions">{{ trans('table.actions') }}</th>
+                                    </tr>
+                                    </thead>
+                                    <tbody>
+                                    @if ($accessory->uploads->count() > 0)
+                                        @foreach ($accessory->uploads as $file)
+                                            <tr>
+                                                <td>
+                                                    <i class="{{ Helper::filetype_icon($file->filename) }} icon-med" aria-hidden="true"></i>
+                                                    <span class="sr-only">{{ Helper::filetype_icon($file->filename) }}</span>
 
+                                                </td>
+                                                <td>
+                                                    @if ($file->filename)
+                                                        @if ( Helper::checkUploadIsImage($file->get_src('accessorys')))
+                                                            <a href="{{ route('show.accessoryfile', ['accessoryId' => $accessory->id, 'fileId' => $file->id, 'download' => 'false']) }}" data-toggle="lightbox" data-type="image"><img src="{{ route('show.accessoryfile', ['accessoryId' => $accessory->id, 'fileId' => $file->id]) }}" class="img-thumbnail" style="max-width: 50px;"></a>
+                                                        @endif
+                                                    @endif
+                                                </td>
+                                                <td>
+                                                    {{ $file->filename }}
+                                                </td>
+                                                <td data-value="{{ (Storage::exists('private_uploads/accessorys/'.$file->filename) ? Storage::size('private_uploads/accessorys/'.$file->filename) : '') }}">
+                                                    {{ @Helper::formatFilesizeUnits(Storage::exists('private_uploads/accessorys/'.$file->filename) ? Storage::size('private_uploads/accessorys/'.$file->filename) : '') }}
+                                                </td>
+
+                                                <td>
+                                                    @if ($file->note)
+                                                        {{ $file->note }}
+                                                    @endif
+                                                </td>
+                                                <td>
+                                                    @if ($file->filename)
+                                                        <a href="{{ route('show.accessoryfile', [$accessory->id, $file->id, 'download' => 'true']) }}" class="btn btn-default">
+                                                            <i class="fas fa-download" aria-hidden="true"></i>
+                                                            <span class="sr-only">{{ trans('general.download') }}</span>
+                                                        </a>
+                                                    @endif
+                                                </td>
+                                                <td>{{ $file->created_at }}</td>
+                                                <td>
+                                                    <a class="btn delete-asset btn-danger btn-sm" href="{{ route('delete/accessoryfile', [$accessory->id, $file->id]) }}" data-content="{{ trans('general.delete_confirm', ['item' => $file->filename]) }}" data-title="{{ trans('general.delete') }}">
+                                                        <i class="fas fa-trash icon-white" aria-hidden="true"></i>
+                                                        <span class="sr-only">{{ trans('general.delete') }}</span>
+                                                    </a>
+                                                </td>
+                                            </tr>
+                                        @endforeach
+                                    @else
+                                        <tr>
+                                            <td colspan="8">{{ trans('general.no_results') }}</td>
+                                        </tr>
+                                    @endif
+                                    </tbody>
+                                </table>
+                            </div>
+                        </div> <!-- /.tab-pane -->
+                    @endcan
+
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
 
 
 <!-- side address column -->
@@ -220,17 +389,17 @@
         </div><!--tab history-->
     </div><!--tab-content-->
 </div><!--/.nav-tabs-custom-->
+
+
+
+@can('update', Accessory::class)
+    @include ('modals.upload-file', ['item_type' => 'accessory', 'item_id' => $accessory->id])
+@endcan
 @stop
 
 
 
 
-
-
-
-
-
-
 @section('moar_scripts')
 @include ('partials.bootstrap-table')
 @stop

resources/views/components/view.blade.php

@@ -48,61 +48,188 @@
   @endcan
 @stop
 
-
 {{-- Page content --}}
 @section('content')
-
+{{-- Page content --}}
 <div class="row">
   <div class="col-md-9">
-    <div class="box box-default">
-      <div class="box-body">
-        <div class="row">
-          <div class="col-md-12">
-            <div class="table table-responsive">
 
-              <table
+    <!-- Custom Tabs -->
-                      data-cookie-id-table="componentsCheckedoutTable"
+    <div class="nav-tabs-custom">
-                      data-pagination="true"
+      <ul class="nav nav-tabs hidden-print">
-                      data-id-table="componentsCheckedoutTable"
+
-                      data-search="true"
+        <li class="active">
-                      data-side-pagination="server"
+          <a href="#checkedout" data-toggle="tab">
-                      data-show-columns="true"
+            <span class="hidden-lg hidden-md">
-                      data-show-export="true"
+            <i class="fas fa-info-circle fa-2x" aria-hidden="true"></i>
-                      data-show-footer="true"
+            </span>
-                      data-show-refresh="true"
+            <span class="hidden-xs hidden-sm">{{ trans('admin/users/general.info') }}</span>
-                      data-sort-order="asc"
+          </a>
-                      data-sort-name="name"
+        </li>
-                      id="componentsCheckedoutTable"
+
-                      class="table table-striped snipe-table"
+
-                      data-url="{{ route('api.components.assets', $component->id)}}"
+        @can('components.files', $component)
-                      data-export-options='{
+          <li>
+            <a href="#files" data-toggle="tab">
+            <span class="hidden-lg hidden-md">
+            <i class="far fa-file fa-2x" aria-hidden="true"></i></span>
+              <span class="hidden-xs hidden-sm">{{ trans('general.file_uploads') }}
+                {!! ($component->uploads->count() > 0 ) ? '<badge class="badge badge-secondary">'.number_format($component->uploads->count()).'</badge>' : '' !!}
+            </span>
+            </a>
+          </li>
+        @endcan
+
+        @can('update', Component::class)
+
+          <li class="pull-right">
+            <a href="#" data-toggle="modal" data-target="#uploadFileModal">
+              <i class="fas fa-paperclip" aria-hidden="true"></i> {{ trans('button.upload') }}
+            </a>
+          </li>
+        @endcan
+      </ul>
+
+      <div class="tab-content">
+
+        <div class="tab-pane active" id="checkedout">
+          <div class="table table-responsive">
+
+            <table
+                    data-cookie-id-table="componentsCheckedoutTable"
+                    data-pagination="true"
+                    data-id-table="componentsCheckedoutTable"
+                    data-search="true"
+                    data-side-pagination="server"
+                    data-show-columns="true"
+                    data-show-export="true"
+                    data-show-footer="true"
+                    data-show-refresh="true"
+                    data-sort-order="asc"
+                    data-sort-name="name"
+                    id="componentsCheckedoutTable"
+                    class="table table-striped snipe-table"
+                    data-url="{{ route('api.components.assets', $component->id)}}"
+                    data-export-options='{
                 "fileName": "export-components-{{ str_slug($component->name) }}-checkedout-{{ date('Y-m-d') }}",
                 "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","icon"]
                 }'>
+              <thead>
+              <tr>
+                <th data-searchable="false" data-sortable="false" data-field="name" data-formatter="hardwareLinkFormatter">
+                  {{ trans('general.asset') }}
+                </th>
+                <th data-searchable="false" data-sortable="false" data-field="qty">
+                  {{ trans('general.qty') }}
+                </th>
+                <th data-searchable="false" data-sortable="false" data-field="note">
+                  {{ trans('general.notes') }}
+                </th>
+                <th data-searchable="false" data-sortable="false" data-field="created_at" data-formatter="dateDisplayFormatter">
+                  {{ trans('general.date') }}
+                </th>
+                <th data-switchable="false" data-searchable="false" data-sortable="false" data-field="checkincheckout" data-formatter="componentsInOutFormatter">
+                  {{ trans('general.checkin') }}/{{ trans('general.checkout') }}
+                </th>
+              </tr>
+              </thead>
+            </table>
+
+          </div>
+        </div> <!-- close tab-pane div -->
+
+
+        @can('components.files', $component)
+          <div class="tab-pane" id="files">
+
+            <div class="table-responsive">
+              <table
+                      data-cookie-id-table="componentUploadsTable"
+                      data-id-table="componentUploadsTable"
+                      id="componentUploadsTable"
+                      data-search="true"
+                      data-pagination="true"
+                      data-side-pagination="client"
+                      data-show-columns="true"
+                      data-show-export="true"
+                      data-show-footer="true"
+                      data-toolbar="#upload-toolbar"
+                      data-show-refresh="true"
+                      data-sort-order="asc"
+                      data-sort-name="name"
+                      class="table table-striped snipe-table"
+                      data-export-options='{
+                    "fileName": "export-components-uploads-{{ str_slug($component->name) }}-{{ date('Y-m-d') }}",
+                    "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","delete","download","icon"]
+                    }'>
                 <thead>
                 <tr>
-                  <th data-searchable="false" data-sortable="false" data-field="name" data-formatter="hardwareLinkFormatter">
+                  <th data-visible="true" data-field="icon" data-sortable="true">{{trans('general.file_type')}}</th>
-                    {{ trans('general.asset') }}
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="image">{{ trans('general.image') }}</th>
-                  </th>
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="filename" data-sortable="true">{{ trans('general.file_name') }}</th>
-                  <th data-searchable="false" data-sortable="false" data-field="qty">
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="filesize">{{ trans('general.filesize') }}</th>
-                    {{ trans('general.qty') }}
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="notes" data-sortable="true">{{ trans('general.notes') }}</th>
-                  </th>
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="download">{{ trans('general.download') }}</th>
-                  <th data-searchable="false" data-sortable="false" data-field="note">
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="created_at" data-sortable="true">{{ trans('general.created_at') }}</th>
-                    {{ trans('general.notes') }}
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="actions">{{ trans('table.actions') }}</th>
-                  </th>
-                  <th data-searchable="false" data-sortable="false" data-field="created_at" data-formatter="dateDisplayFormatter">
-                    {{ trans('general.date') }}
-                  </th>
-                  <th data-switchable="false" data-searchable="false" data-sortable="false" data-field="checkincheckout" data-formatter="componentsInOutFormatter">
-                    {{ trans('general.checkin') }}/{{ trans('general.checkout') }}
-                  </th>
                 </tr>
                 </thead>
-              </table>
+                <tbody>
+                @if ($component->uploads->count() > 0)
+                  @foreach ($component->uploads as $file)
+                    <tr>
+                      <td>
+                        <i class="{{ Helper::filetype_icon($file->filename) }} icon-med" aria-hidden="true"></i>
+                        <span class="sr-only">{{ Helper::filetype_icon($file->filename) }}</span>
 
+                      </td>
+                      <td>
+                        @if ($file->filename)
+                          @if ( Helper::checkUploadIsImage($file->get_src('components')))
+                            <a href="{{ route('show.componentfile', ['componentId' => $component->id, 'fileId' => $file->id, 'download' => 'false']) }}" data-toggle="lightbox" data-type="image"><img src="{{ route('show.componentfile', ['componentId' => $component->id, 'fileId' => $file->id]) }}" class="img-thumbnail" style="max-width: 50px;"></a>
+                          @endif
+                        @endif
+                      </td>
+                      <td>
+                        {{ $file->filename }}
+                      </td>
+                      <td data-value="{{ (Storage::exists('private_uploads/components/'.$file->filename) ? Storage::size('private_uploads/components/'.$file->filename) : '') }}">
+                        {{ @Helper::formatFilesizeUnits(Storage::exists('private_uploads/components/'.$file->filename) ? Storage::size('private_uploads/components/'.$file->filename) : '') }}
+                      </td>
+
+                      <td>
+                        @if ($file->note)
+                          {{ $file->note }}
+                        @endif
+                      </td>
+                      <td>
+                        @if ($file->filename)
+                          <a href="{{ route('show.componentfile', [$component->id, $file->id, 'download' => 'true']) }}" class="btn btn-default">
+                            <i class="fas fa-download" aria-hidden="true"></i>
+                            <span class="sr-only">{{ trans('general.download') }}</span>
+                          </a>
+                        @endif
+                      </td>
+                      <td>{{ $file->created_at }}</td>
+                      <td>
+                        <a class="btn delete-asset btn-danger btn-sm" href="{{ route('delete/componentfile', [$component->id, $file->id]) }}" data-content="{{ trans('general.delete_confirm', ['item' => $file->filename]) }}" data-title="{{ trans('general.delete') }}">
+                          <i class="fas fa-trash icon-white" aria-hidden="true"></i>
+                          <span class="sr-only">{{ trans('general.delete') }}</span>
+                        </a>
+                      </td>
+                    </tr>
+                  @endforeach
+                @else
+                  <tr>
+                    <td colspan="8">{{ trans('general.no_results') }}</td>
+                  </tr>
+                @endif
+                </tbody>
+              </table>
             </div>
-          </div> <!-- .col-md-12-->
+          </div> <!-- /.tab-pane -->
-        </div>
+        @endcan
+
       </div>
     </div>
   </div> <!-- .col-md-9-->
@@ -156,6 +283,9 @@
   </div>
 </div> <!-- .row-->
 
+@can('update', Component::class)
+  @include ('modals.upload-file', ['item_type' => 'component', 'item_id' => $component->id])
+@endcan
 @stop
 
 @section('moar_scripts')

resources/views/consumables/view.blade.php

@@ -18,57 +18,182 @@
 
 <div class="row">
   <div class="col-md-9">
-    <div class="box box-default">
-      @if ($consumable->id)
-      <div class="box-header with-border">
-        <div class="box-heading">
-          <h2 class="box-title"> {{ $consumable->name }}</h2>
-        </div>
-      </div><!-- /.box-header -->
-      @endif
 
-      <div class="box-body">
+    <!-- Custom Tabs -->
-        <div class="row">
+    <div class="nav-tabs-custom">
-          <div class="col-md-12">
+      <ul class="nav nav-tabs hidden-print">
-            <div class="table table-responsive">
 
-              <table
+        <li class="active">
-                      data-cookie-id-table="consumablesCheckedoutTable"
+          <a href="#checkedout" data-toggle="tab">
-                      data-pagination="true"
+            <span class="hidden-lg hidden-md">
-                      data-id-table="consumablesCheckedoutTable"
+            <i class="fas fa-info-circle fa-2x" aria-hidden="true"></i>
-                      data-search="false"
+            </span>
-                      data-side-pagination="server"
+            <span class="hidden-xs hidden-sm">{{ trans('admin/users/general.info') }}</span>
-                      data-show-columns="true"
+          </a>
-                      data-show-export="true"
+        </li>
-                      data-show-footer="true"
+
-                      data-show-refresh="true"
+
-                      data-sort-order="asc"
+        @can('consumables.files', $consumable)
-                      data-sort-name="name"
+          <li>
-                      id="consumablesCheckedoutTable"
+            <a href="#files" data-toggle="tab">
-                      class="table table-striped snipe-table"
+            <span class="hidden-lg hidden-md">
-                      data-url="{{route('api.consumables.showUsers', $consumable->id)}}"
+            <i class="far fa-file fa-2x" aria-hidden="true"></i></span>
-                      data-export-options='{
+              <span class="hidden-xs hidden-sm">{{ trans('general.file_uploads') }}
+                {!! ($consumable->uploads->count() > 0 ) ? '<badge class="badge badge-secondary">'.number_format($consumable->uploads->count()).'</badge>' : '' !!}
+            </span>
+            </a>
+          </li>
+        @endcan
+
+        @can('update', Consumable::class)
+
+          <li class="pull-right">
+            <a href="#" data-toggle="modal" data-target="#uploadFileModal">
+              <i class="fas fa-paperclip" aria-hidden="true"></i> {{ trans('button.upload') }}
+            </a>
+          </li>
+        @endcan
+
+      </ul>
+
+      <div class="tab-content">
+
+        <div class="tab-pane active" id="checkedout">
+              <div class="table-responsive">
+
+                <table
+                        data-cookie-id-table="consumablesCheckedoutTable"
+                        data-pagination="true"
+                        data-id-table="consumablesCheckedoutTable"
+                        data-search="false"
+                        data-side-pagination="server"
+                        data-show-columns="true"
+                        data-show-export="true"
+                        data-show-footer="true"
+                        data-show-refresh="true"
+                        data-sort-order="asc"
+                        data-sort-name="name"
+                        id="consumablesCheckedoutTable"
+                        class="table table-striped snipe-table"
+                        data-url="{{route('api.consumables.showUsers', $consumable->id)}}"
+                        data-export-options='{
                 "fileName": "export-consumables-{{ str_slug($consumable->name) }}-checkedout-{{ date('Y-m-d') }}",
                 "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","icon"]
                 }'>
-                <thead>
+                  <thead>
                   <tr>
-                    <th data-searchable="false" data-sortable="false" data-field="name">{{ trans('general.user') }}</th>
+                    <th data-searchable="false" data-sortable="false" data-field="avatar" data-formatter="imageFormatter">{{ trans('general.image') }}</th>
-                    <th data-searchable="false" data-sortable="false" data-field="created_at" data-formatter="dateDisplayFormatter">{{ trans('general.date') }}</th>
+                    <th data-searchable="false" data-sortable="false" data-field="name" formatter="usersLinkFormatter">{{ trans('general.user') }}</th>
+                    <th data-searchable="false" data-sortable="false" data-field="created_at" data-formatter="dateDisplayFormatter">
+                      {{ trans('general.date') }}
+                    </th>
                     <th data-searchable="false" data-sortable="false" data-field="note">{{ trans('general.notes') }}</th>
                     <th data-searchable="false" data-sortable="false" data-field="admin">{{ trans('general.admin') }}</th>
                   </tr>
+                  </thead>
+                </table>
+          </div>
+        </div> <!-- close tab-pane div -->
+
+
+        @can('consumables.files', $consumable)
+          <div class="tab-pane" id="files">
+
+            <div class="table-responsive">
+              <table
+                      data-cookie-id-table="consumableUploadsTable"
+                      data-id-table="consumableUploadsTable"
+                      id="consumableUploadsTable"
+                      data-search="true"
+                      data-pagination="true"
+                      data-side-pagination="client"
+                      data-show-columns="true"
+                      data-show-export="true"
+                      data-show-footer="true"
+                      data-toolbar="#upload-toolbar"
+                      data-show-refresh="true"
+                      data-sort-order="asc"
+                      data-sort-name="name"
+                      class="table table-striped snipe-table"
+                      data-export-options='{
+                    "fileName": "export-consumables-uploads-{{ str_slug($consumable->name) }}-{{ date('Y-m-d') }}",
+                    "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","delete","download","icon"]
+                    }'>
+                <thead>
+                <tr>
+                  <th data-visible="true" data-field="icon" data-sortable="true">{{trans('general.file_type')}}</th>
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="image">{{ trans('general.image') }}</th>
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="filename" data-sortable="true">{{ trans('general.file_name') }}</th>
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="filesize">{{ trans('general.filesize') }}</th>
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="notes" data-sortable="true">{{ trans('general.notes') }}</th>
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="download">{{ trans('general.download') }}</th>
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="created_at" data-sortable="true">{{ trans('general.created_at') }}</th>
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="actions">{{ trans('table.actions') }}</th>
+                </tr>
                 </thead>
+                <tbody>
+                @if ($consumable->uploads->count() > 0)
+                  @foreach ($consumable->uploads as $file)
+                    <tr>
+                      <td>
+                        <i class="{{ Helper::filetype_icon($file->filename) }} icon-med" aria-hidden="true"></i>
+                        <span class="sr-only">{{ Helper::filetype_icon($file->filename) }}</span>
+
+                      </td>
+                      <td>
+                        @if ($file->filename)
+                          @if ( Helper::checkUploadIsImage($file->get_src('consumables')))
+                            <a href="{{ route('show.consumablefile', ['consumableId' => $consumable->id, 'fileId' => $file->id, 'download' => 'false']) }}" data-toggle="lightbox" data-type="image"><img src="{{ route('show.consumablefile', ['consumableId' => $consumable->id, 'fileId' => $file->id]) }}" class="img-thumbnail" style="max-width: 50px;"></a>
+                          @endif
+                        @endif
+                      </td>
+                      <td>
+                        {{ $file->filename }}
+                      </td>
+                      <td data-value="{{ (Storage::exists('private_uploads/consumables/'.$file->filename) ? Storage::size('private_uploads/consumables/'.$file->filename) : '') }}">
+                        {{ @Helper::formatFilesizeUnits(Storage::exists('private_uploads/consumables/'.$file->filename) ? Storage::size('private_uploads/consumables/'.$file->filename) : '') }}
+                      </td>
+
+                      <td>
+                        @if ($file->note)
+                          {{ $file->note }}
+                        @endif
+                      </td>
+                      <td>
+                        @if ($file->filename)
+                          <a href="{{ route('show.consumablefile', [$consumable->id, $file->id, 'download' => 'true']) }}" class="btn btn-default">
+                            <i class="fas fa-download" aria-hidden="true"></i>
+                            <span class="sr-only">{{ trans('general.download') }}</span>
+                          </a>
+                        @endif
+                      </td>
+                      <td>{{ $file->created_at }}</td>
+                      <td>
+                        <a class="btn delete-asset btn-danger btn-sm" href="{{ route('delete/consumablefile', [$consumable->id, $file->id]) }}" data-content="{{ trans('general.delete_confirm', ['item' => $file->filename]) }}" data-title="{{ trans('general.delete') }}">
+                          <i class="fas fa-trash icon-white" aria-hidden="true"></i>
+                          <span class="sr-only">{{ trans('general.delete') }}</span>
+                        </a>
+                      </td>
+                    </tr>
+                  @endforeach
+                @else
+                  <tr>
+                    <td colspan="8">{{ trans('general.no_results') }}</td>
+                  </tr>
+                @endif
+                </tbody>
               </table>
             </div>
-          </div> <!-- /.col-md-12-->
+          </div> <!-- /.tab-pane -->
+        @endcan
 
-        </div>
       </div>
-    </div> <!-- /.box.box-default-->
+    </div>
-  </div> <!-- /.col-md-9-->
-  <div class="col-md-3">
 
+  </div>
+
+
+  <div class="col-md-3">
 
         <div class="box box-default">
           <div class="box-body">
@@ -161,6 +286,11 @@
   </div> <!-- /.col-md-3-->
 </div> <!-- /.row-->
 
+
+
+@can('update', \App\Models\Consumable::class)
+  @include ('modals.upload-file', ['item_type' => 'consumable', 'item_id' => $consumable->id])
+@endcan
 @stop
 
 @section('moar_scripts')

resources/views/partials/bootstrap-table.blade.php

@@ -632,10 +632,14 @@
 
         if (value) {
 
-            if (row.name) {
+            // This is a clunky override to handle unusual API responses where we're presenting a link instead of an array
+            if (row.avatar) {
+                var altName = '';
+            }
+            else if (row.name) {
                 var altName = row.name;
             }
-                else if ((row) && (row.model)) {
+            else if ((row) && (row.model)) {
                 var altName = row.model.name;
            }
             return '<a href="' + value + '" data-toggle="lightbox" data-type="image"><img src="' + value + '" style="max-height: {{ $snipeSettings->thumbnail_max_h }}px; width: auto;" class="img-responsive" alt="' + altName + '"></a>';

routes/web/accessories.php

@@ -27,6 +27,21 @@ Route::group(['prefix' => 'accessories', 'middleware' => ['auth']], function ()
         [Accessories\AccessoryCheckinController::class, 'store']
     )->name('accessories.checkin.store');
 
+    Route::post(
+        '{accessoryId}/upload',
+        [Accessories\AccessoriesFilesController::class, 'store']
+    )->name('upload/accessory');
+
+    Route::delete(
+        '{accessoryId}/deletefile/{fileId}',
+        [Accessories\AccessoriesFilesController::class, 'destroy']
+    )->name('delete/accessoryfile');
+
+    Route::get(
+        '{accessoryId}/showfile/{fileId}/{download?}',
+        [Accessories\AccessoriesFilesController::class, 'show']
+    )->name('show.accessoryfile');
+
 });
 
 Route::resource('accessories', Accessories\AccessoriesController::class, [

routes/web/components.php

@@ -25,6 +25,21 @@ Route::group(['prefix' => 'components', 'middleware' => ['auth']], function () {
         [Components\ComponentCheckinController::class, 'store']
     )->name('components.checkin.store');
 
+    Route::post(
+        '{componentId}/upload',
+        [Components\ComponentsFilesController::class, 'store']
+    )->name('upload/component');
+
+    Route::delete(
+        '{componentId}/deletefile/{fileId}',
+        [Components\ComponentsFilesController::class, 'destroy']
+    )->name('delete/componentfile');
+
+    Route::get(
+        '{componentId}/showfile/{fileId}/{download?}',
+        [Components\ComponentsFilesController::class, 'show']
+    )->name('show.componentfile');
+
 });
 
 Route::resource('components', Components\ComponentsController::class, [

routes/web/consumables.php

@@ -16,6 +16,21 @@ Route::group(['prefix' => 'consumables', 'middleware' => ['auth']], function ()
         [Consumables\ConsumableCheckoutController::class, 'store']
     )->name('consumables.checkout.store');
 
+    Route::post(
+        '{consumableId}/upload',
+        [Consumables\ConsumablesFilesController::class, 'store']
+    )->name('upload/consumable');
+
+    Route::delete(
+        '{consumableId}/deletefile/{fileId}',
+        [Consumables\ConsumablesFilesController::class, 'destroy']
+    )->name('delete/consumablefile');
+
+    Route::get(
+        '{consumableId}/showfile/{fileId}/{download?}',
+        [Consumables\ConsumablesFilesController::class, 'show']
+    )->name('show.consumablefile');
+
 
 });