Merge pull request #12058 from snipe/features/added_uploads_to_components

Added uploads to components

app/Http/Controllers/Components/ComponentsFilesController.php

@@ -0,0 +1,175 @@
+<?php
+
+namespace App\Http\Controllers\Components;
+
+use App\Helpers\StorageHelper;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\AssetFileRequest;
+use App\Models\Actionlog;
+use App\Models\Component;
+use Illuminate\Support\Facades\Response;
+use Illuminate\Support\Facades\Storage;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use enshrined\svgSanitize\Sanitizer;
+
+class ComponentsFilesController extends Controller
+{
+    /**
+     * Validates and stores files associated with a component.
+     *
+     * @todo Switch to using the AssetFileRequest form request validator.
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.0]
+     * @param AssetFileRequest $request
+     * @param int $componentId
+     * @return \Illuminate\Http\RedirectResponse
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function store(AssetFileRequest $request, $componentId = null)
+    {
+        $component = Component::find($componentId);
+
+        if (isset($component->id)) {
+            $this->authorize('update', $component);
+
+            if ($request->hasFile('file')) {
+                if (! Storage::exists('private_uploads/components')) {
+                    Storage::makeDirectory('private_uploads/components', 775);
+                }
+
+                foreach ($request->file('file') as $file) {
+
+                    $extension = $file->getClientOriginalExtension();
+                    $file_name = 'component-'.$component->id.'-'.str_random(8).'-'.str_slug(basename($file->getClientOriginalName(), '.'.$extension)).'.'.$extension;
+
+
+                    // Check for SVG and sanitize it
+                    if ($extension == 'svg') {
+                        \Log::debug('This is an SVG');
+                        \Log::debug($file_name);
+
+                        $sanitizer = new Sanitizer();
+                        $dirtySVG = file_get_contents($file->getRealPath());
+                        $cleanSVG = $sanitizer->sanitize($dirtySVG);
+
+                        try {
+                            Storage::put('private_uploads/components/'.$file_name, $cleanSVG);
+                        } catch (\Exception $e) {
+                            \Log::debug('Upload no workie :( ');
+                            \Log::debug($e);
+                        }
+
+                    } else {
+                        Storage::put('private_uploads/components/'.$file_name, file_get_contents($file));
+                    }
+
+                    //Log the upload to the log
+                    $component->logUpload($file_name, e($request->input('notes')));
+                }
+
+
+                return redirect()->route('components.show', $component->id)->with('success', trans('general.file_upload_success'));
+
+            }
+
+            return redirect()->route('components.show', $component->id)->with('error', trans('general.no_files_uploaded'));
+        }
+        // Prepare the error message
+        return redirect()->route('components.index')
+            ->with('error', trans('general.file_does_not_exist'));
+    }
+
+    /**
+     * Deletes the selected component file.
+     *
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.0]
+     * @param int $componentId
+     * @param int $fileId
+     * @return \Illuminate\Http\RedirectResponse
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function destroy($componentId = null, $fileId = null)
+    {
+        $component = Component::find($componentId);
+
+        // the asset is valid
+        if (isset($component->id)) {
+            $this->authorize('update', $component);
+            $log = Actionlog::find($fileId);
+
+            // Remove the file if one exists
+            if (Storage::exists('components/'.$log->filename)) {
+                try {
+                    Storage::delete('components/'.$log->filename);
+                } catch (\Exception $e) {
+                    \Log::debug($e);
+                }
+            }
+
+            $log->delete();
+
+            return redirect()->back()
+                ->with('success', trans('admin/hardware/message.deletefile.success'));
+        }
+
+        // Redirect to the licence management page
+        return redirect()->route('components.index')->with('error', trans('general.file_does_not_exist'));
+    }
+
+    /**
+     * Allows the selected file to be viewed.
+     *
+     * @author [A. Gianotto] [<snipe@snipe.net>]
+     * @since [v1.4]
+     * @param int $componentId
+     * @param int $fileId
+     * @return \Symfony\Component\HttpFoundation\Response
+     * @throws \Illuminate\Auth\Access\AuthorizationException
+     */
+    public function show($componentId = null, $fileId = null, $download = true)
+    {
+        \Log::debug('Private filesystem is: '.config('filesystems.default'));
+        $component = Component::find($componentId);
+
+        // the component is valid
+        if (isset($component->id)) {
+            $this->authorize('view', $component);
+            $this->authorize('components.files', $component);
+
+            if (! $log = Actionlog::find($fileId)) {
+                return response('No matching record for that asset/file', 500)
+                    ->header('Content-Type', 'text/plain');
+            }
+
+            $file = 'private_uploads/components/'.$log->filename;
+
+            if (Storage::missing($file)) {
+                \Log::debug('FILE DOES NOT EXISTS for '.$file);
+                \Log::debug('URL should be '.Storage::url($file));
+
+                return response('File '.$file.' ('.Storage::url($file).') not found on server', 404)
+                    ->header('Content-Type', 'text/plain');
+            } else {
+
+                if (config('filesystems.default') == 'local') { // TODO - is there any way to fix this at the StorageHelper layer?
+                    return StorageHelper::downloader($file);
+                } else {
+                    if ($download != 'true') {
+                        \Log::debug('display the file');
+                        if ($contents = file_get_contents(Storage::url($file))) { // TODO - this will fail on private S3 files or large public ones
+                            return Response::make(Storage::url($file)->header('Content-Type', mime_content_type($file)));
+                        }
+
+                        return JsonResponse::create(['error' => 'Failed validation: '], 500);
+                    }
+
+                    return StorageHelper::downloader($file);
+
+                }
+            }
+        }
+
+        return redirect()->route('components.index')->with('error', trans('general.file_does_not_exist', ['id' => $fileId]));
+    }
+}

app/Models/Component.php

@@ -88,6 +88,24 @@ class Component extends SnipeModel
         'location'     => ['name'],
     ];
 
+
+    /**
+     * Establishes the components -> action logs -> uploads relationship
+     *
+     * @author A. Gianotto <snipe@snipe.net>
+     * @since [v6.1.13]
+     * @return \Illuminate\Database\Eloquent\Relations\Relation
+     */
+    public function uploads()
+    {
+        return $this->hasMany(\App\Models\Actionlog::class, 'item_id')
+            ->where('item_type', '=', self::class)
+            ->where('action_type', '=', 'uploaded')
+            ->whereNotNull('filename')
+            ->orderBy('created_at', 'desc');
+    }
+
+
     /**
      * Establishes the component -> location relationship
      *

config/permissions.php

@@ -270,6 +270,12 @@ return [
             'note'       => '',
             'display'    => true,
         ],
+        [
+            'permission' => 'components.files',
+            'label'      => 'View and Modify Component Files',
+            'note'       => '',
+            'display'    => true,
+        ],
 
     ],
 

resources/lang/en/general.php

@@ -280,6 +280,9 @@ return [
     'yes' 					=> 'Yes',
     'zip'  					=> 'Zip',
     'noimage'				=> 'No image uploaded or image not found.',
+    'file_does_not_exist'   => 'The requested file does not exist on the server.',
+    'file_upload_success'   => 'File upload success!',
+    'no_files_uploaded'     => 'File upload success!',
     'token_expired'         => 'Your form session has expired. Please try again.',
     'login_enabled'         => 'Login Enabled',
     'audit_due'             => 'Due for Audit',

resources/views/components/view.blade.php

@@ -48,61 +48,188 @@
   @endcan
 @stop
 
-
 {{-- Page content --}}
 @section('content')
-
+{{-- Page content --}}
 <div class="row">
   <div class="col-md-9">
-    <div class="box box-default">
-      <div class="box-body">
-        <div class="row">
-          <div class="col-md-12">
-            <div class="table table-responsive">
 
-              <table
+    <!-- Custom Tabs -->
-                      data-cookie-id-table="componentsCheckedoutTable"
+    <div class="nav-tabs-custom">
-                      data-pagination="true"
+      <ul class="nav nav-tabs hidden-print">
-                      data-id-table="componentsCheckedoutTable"
+
-                      data-search="true"
+        <li class="active">
-                      data-side-pagination="server"
+          <a href="#checkedout" data-toggle="tab">
-                      data-show-columns="true"
+            <span class="hidden-lg hidden-md">
-                      data-show-export="true"
+            <i class="fas fa-info-circle fa-2x" aria-hidden="true"></i>
-                      data-show-footer="true"
+            </span>
-                      data-show-refresh="true"
+            <span class="hidden-xs hidden-sm">{{ trans('admin/users/general.info') }}</span>
-                      data-sort-order="asc"
+          </a>
-                      data-sort-name="name"
+        </li>
-                      id="componentsCheckedoutTable"
+
-                      class="table table-striped snipe-table"
+
-                      data-url="{{ route('api.components.assets', $component->id)}}"
+        @can('components.files', $component)
-                      data-export-options='{
+          <li>
+            <a href="#files" data-toggle="tab">
+            <span class="hidden-lg hidden-md">
+            <i class="far fa-file fa-2x" aria-hidden="true"></i></span>
+              <span class="hidden-xs hidden-sm">{{ trans('general.file_uploads') }}
+                {!! ($component->uploads->count() > 0 ) ? '<badge class="badge badge-secondary">'.number_format($component->uploads->count()).'</badge>' : '' !!}
+            </span>
+            </a>
+          </li>
+        @endcan
+
+        @can('update', Component::class)
+
+          <li class="pull-right">
+            <a href="#" data-toggle="modal" data-target="#uploadFileModal">
+              <i class="fas fa-paperclip" aria-hidden="true"></i> {{ trans('button.upload') }}
+            </a>
+          </li>
+        @endcan
+      </ul>
+
+      <div class="tab-content">
+
+        <div class="tab-pane active" id="checkedout">
+          <div class="table table-responsive">
+
+            <table
+                    data-cookie-id-table="componentsCheckedoutTable"
+                    data-pagination="true"
+                    data-id-table="componentsCheckedoutTable"
+                    data-search="true"
+                    data-side-pagination="server"
+                    data-show-columns="true"
+                    data-show-export="true"
+                    data-show-footer="true"
+                    data-show-refresh="true"
+                    data-sort-order="asc"
+                    data-sort-name="name"
+                    id="componentsCheckedoutTable"
+                    class="table table-striped snipe-table"
+                    data-url="{{ route('api.components.assets', $component->id)}}"
+                    data-export-options='{
                 "fileName": "export-components-{{ str_slug($component->name) }}-checkedout-{{ date('Y-m-d') }}",
                 "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","icon"]
                 }'>
+              <thead>
+              <tr>
+                <th data-searchable="false" data-sortable="false" data-field="name" data-formatter="hardwareLinkFormatter">
+                  {{ trans('general.asset') }}
+                </th>
+                <th data-searchable="false" data-sortable="false" data-field="qty">
+                  {{ trans('general.qty') }}
+                </th>
+                <th data-searchable="false" data-sortable="false" data-field="note">
+                  {{ trans('general.notes') }}
+                </th>
+                <th data-searchable="false" data-sortable="false" data-field="created_at" data-formatter="dateDisplayFormatter">
+                  {{ trans('general.date') }}
+                </th>
+                <th data-switchable="false" data-searchable="false" data-sortable="false" data-field="checkincheckout" data-formatter="componentsInOutFormatter">
+                  {{ trans('general.checkin') }}/{{ trans('general.checkout') }}
+                </th>
+              </tr>
+              </thead>
+            </table>
+
+          </div>
+        </div> <!-- close tab-pane div -->
+
+
+        @can('components.files', $component)
+          <div class="tab-pane" id="files">
+
+            <div class="table-responsive">
+              <table
+                      data-cookie-id-table="componentUploadsTable"
+                      data-id-table="componentUploadsTable"
+                      id="componentUploadsTable"
+                      data-search="true"
+                      data-pagination="true"
+                      data-side-pagination="client"
+                      data-show-columns="true"
+                      data-show-export="true"
+                      data-show-footer="true"
+                      data-toolbar="#upload-toolbar"
+                      data-show-refresh="true"
+                      data-sort-order="asc"
+                      data-sort-name="name"
+                      class="table table-striped snipe-table"
+                      data-export-options='{
+                    "fileName": "export-components-uploads-{{ str_slug($component->name) }}-{{ date('Y-m-d') }}",
+                    "ignoreColumn": ["actions","image","change","checkbox","checkincheckout","delete","download","icon"]
+                    }'>
                 <thead>
                 <tr>
-                  <th data-searchable="false" data-sortable="false" data-field="name" data-formatter="hardwareLinkFormatter">
+                  <th data-visible="true" data-field="icon" data-sortable="true">{{trans('general.file_type')}}</th>
-                    {{ trans('general.asset') }}
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="image">{{ trans('general.image') }}</th>
-                  </th>
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="filename" data-sortable="true">{{ trans('general.file_name') }}</th>
-                  <th data-searchable="false" data-sortable="false" data-field="qty">
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="filesize">{{ trans('general.filesize') }}</th>
-                    {{ trans('general.qty') }}
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="notes" data-sortable="true">{{ trans('general.notes') }}</th>
-                  </th>
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="download">{{ trans('general.download') }}</th>
-                  <th data-searchable="false" data-sortable="false" data-field="note">
+                  <th class="col-md-2" data-searchable="true" data-visible="true" data-field="created_at" data-sortable="true">{{ trans('general.created_at') }}</th>
-                    {{ trans('general.notes') }}
+                  <th class="col-md-1" data-searchable="true" data-visible="true" data-field="actions">{{ trans('table.actions') }}</th>
-                  </th>
-                  <th data-searchable="false" data-sortable="false" data-field="created_at" data-formatter="dateDisplayFormatter">
-                    {{ trans('general.date') }}
-                  </th>
-                  <th data-switchable="false" data-searchable="false" data-sortable="false" data-field="checkincheckout" data-formatter="componentsInOutFormatter">
-                    {{ trans('general.checkin') }}/{{ trans('general.checkout') }}
-                  </th>
                 </tr>
                 </thead>
-              </table>
+                <tbody>
+                @if ($component->uploads->count() > 0)
+                  @foreach ($component->uploads as $file)
+                    <tr>
+                      <td>
+                        <i class="{{ Helper::filetype_icon($file->filename) }} icon-med" aria-hidden="true"></i>
+                        <span class="sr-only">{{ Helper::filetype_icon($file->filename) }}</span>
 
+                      </td>
+                      <td>
+                        @if ($file->filename)
+                          @if ( Helper::checkUploadIsImage($file->get_src('components')))
+                            <a href="{{ route('show.componentfile', ['componentId' => $component->id, 'fileId' => $file->id, 'download' => 'false']) }}" data-toggle="lightbox" data-type="image"><img src="{{ route('show.componentfile', ['componentId' => $component->id, 'fileId' => $file->id]) }}" class="img-thumbnail" style="max-width: 50px;"></a>
+                          @endif
+                        @endif
+                      </td>
+                      <td>
+                        {{ $file->filename }}
+                      </td>
+                      <td data-value="{{ (Storage::exists('private_uploads/components/'.$file->filename) ? Storage::size('private_uploads/components/'.$file->filename) : '') }}">
+                        {{ @Helper::formatFilesizeUnits(Storage::exists('private_uploads/components/'.$file->filename) ? Storage::size('private_uploads/components/'.$file->filename) : '') }}
+                      </td>
+
+                      <td>
+                        @if ($file->note)
+                          {{ $file->note }}
+                        @endif
+                      </td>
+                      <td>
+                        @if ($file->filename)
+                          <a href="{{ route('show.componentfile', [$component->id, $file->id, 'download' => 'true']) }}" class="btn btn-default">
+                            <i class="fas fa-download" aria-hidden="true"></i>
+                            <span class="sr-only">{{ trans('general.download') }}</span>
+                          </a>
+                        @endif
+                      </td>
+                      <td>{{ $file->created_at }}</td>
+                      <td>
+                        <a class="btn delete-asset btn-danger btn-sm" href="{{ route('delete/componentfile', [$component->id, $file->id]) }}" data-content="{{ trans('general.delete_confirm', ['item' => $file->filename]) }}" data-title="{{ trans('general.delete') }}">
+                          <i class="fas fa-trash icon-white" aria-hidden="true"></i>
+                          <span class="sr-only">{{ trans('general.delete') }}</span>
+                        </a>
+                      </td>
+                    </tr>
+                  @endforeach
+                @else
+                  <tr>
+                    <td colspan="8">{{ trans('general.no_results') }}</td>
+                  </tr>
+                @endif
+                </tbody>
+              </table>
             </div>
-          </div> <!-- .col-md-12-->
+          </div> <!-- /.tab-pane -->
-        </div>
+        @endcan
+
       </div>
     </div>
   </div> <!-- .col-md-9-->
@@ -156,6 +283,9 @@
   </div>
 </div> <!-- .row-->
 
+@can('update', Component::class)
+  @include ('modals.upload-file', ['item_type' => 'component', 'item_id' => $component->id])
+@endcan
 @stop
 
 @section('moar_scripts')

routes/web/components.php

@@ -25,6 +25,21 @@ Route::group(['prefix' => 'components', 'middleware' => ['auth']], function () {
         [Components\ComponentCheckinController::class, 'store']
     )->name('components.checkin.store');
 
+    Route::post(
+        '{componentId}/upload',
+        [Components\ComponentsFilesController::class, 'store']
+    )->name('upload/component');
+
+    Route::delete(
+        '{componentId}/deletefile/{fileId}',
+        [Components\ComponentsFilesController::class, 'destroy']
+    )->name('delete/componentfile');
+
+    Route::get(
+        '{componentId}/showfile/{fileId}/{download?}',
+        [Components\ComponentsFilesController::class, 'show']
+    )->name('show.componentfile');
+
 });
 
 Route::resource('components', Components\ComponentsController::class, [

storage/private_uploads/components/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore