] * @return View * @internal param int $assetId * @since [v2.0] * @throws \Illuminate\Auth\Access\AuthorizationException */ public function edit(Request $request) { $this->authorize('view', Asset::class); if (! $request->filled('ids')) { return redirect()->back()->with('error', trans('admin/hardware/message.update.no_assets_selected')); } // Figure out where we need to send the user after the update is complete, and store that in the session $bulk_back_url = request()->headers->get('referer'); session(['bulk_back_url' => $bulk_back_url]); $asset_ids = $request->input('ids'); $assets = Asset::with('assignedTo', 'location', 'model')->find($asset_ids); if ($request->filled('bulk_actions')) { switch ($request->input('bulk_actions')) { case 'labels': $this->authorize('view', Asset::class); return (new Label) ->with('assets', $assets) ->with('settings', Setting::getSettings()) ->with('bulkedit', true) ->with('count', 0); case 'delete': $this->authorize('delete', Asset::class); $assets->each(function ($assets) { $this->authorize('delete', $assets); }); return view('hardware/bulk-delete')->with('assets', $assets); case 'restore': $this->authorize('update', Asset::class); $assets->each(function ($asset) { $this->authorize('delete', $asset); }); return view('hardware/bulk-restore')->with('assets', $assets); case 'edit': $this->authorize('update', Asset::class); return view('hardware/bulk') ->with('assets', $asset_ids) ->with('statuslabel_list', Helper::statusLabelList()); } } return redirect()->back()->with('error', 'No action selected'); } /** * Save bulk edits * * @author [A. Gianotto] [] * @return Redirect * @internal param array $assets * @since [v2.0] */ public function update(Request $request) { $this->authorize('update', Asset::class); $has_errors = 0; $error_array = array(); // Get the back url from the session and then destroy the session $bulk_back_url = route('hardware.index'); if ($request->session()->has('bulk_back_url')) { $bulk_back_url = $request->session()->pull('bulk_back_url'); } $custom_field_columns = CustomField::all()->pluck('db_column')->toArray(); if (! $request->filled('ids') || count($request->input('ids')) == 0) { return redirect($bulk_back_url)->with('error', trans('admin/hardware/message.update.no_assets_selected')); } $assets = Asset::whereIn('id', array_keys($request->input('ids')))->get(); /** * If ANY of these are filled, prepare to update the values on the assets. * * Additional checks will be needed for some of them to make sure the values * make sense (for example, changing the status ID to something incompatible with * its checkout status. */ if (($request->filled('purchase_date')) || ($request->filled('expected_checkin')) || ($request->filled('purchase_cost')) || ($request->filled('supplier_id')) || ($request->filled('order_number')) || ($request->filled('warranty_months')) || ($request->filled('rtd_location_id')) || ($request->filled('requestable')) || ($request->filled('company_id')) || ($request->filled('status_id')) || ($request->filled('model_id')) || ($request->filled('next_audit_date')) || ($request->filled('null_purchase_date')) || ($request->filled('null_expected_checkin_date')) || ($request->filled('null_next_audit_date')) || ($request->anyFilled($custom_field_columns)) ) { // Let's loop through those assets and build an update array foreach ($assets as $asset) { $this->update_array = []; /** * Leave out model_id and status here because we do math on that later. We have to do some extra * validation and checks on those two. * * It's tempting to make these match the request check above, but some of these values require * extra work to make sure the data makes sense. */ $this->conditionallyAddItem('purchase_date') ->conditionallyAddItem('expected_checkin') ->conditionallyAddItem('order_number') ->conditionallyAddItem('requestable') ->conditionallyAddItem('supplier_id') ->conditionallyAddItem('warranty_months') ->conditionallyAddItem('next_audit_date'); foreach ($custom_field_columns as $key => $custom_field_column) { $this->conditionallyAddItem($custom_field_column); } /** * Blank out fields that were requested to be blanked out via checkbox */ if ($request->input('null_purchase_date')=='1') { $this->update_array['purchase_date'] = null; } if ($request->input('null_expected_checkin_date')=='1') { $this->update_array['expected_checkin'] = null; } if ($request->input('null_next_audit_date')=='1') { $this->update_array['next_audit_date'] = null; } if ($request->filled('purchase_cost')) { $this->update_array['purchase_cost'] = $request->input('purchase_cost'); } if ($request->filled('company_id')) { $this->update_array['company_id'] = $request->input('company_id'); if ($request->input('company_id') == 'clear') { $this->update_array['company_id'] = null; } } /** * We're trying to change the model ID - we need to do some extra checks here to make sure * the custom field values work for the custom fieldset rules around this asset. Uniqueness * and requiredness across the fieldset is particularly important, since those are * fieldset-specific attributes. */ if ($request->filled('model_id')) { $asset->model_id = AssetModel::find($request->input('model_id'))->id; } /** * We're trying to change the status ID - we need to do some extra checks here to * make sure the status label type is one that makes sense for the state of the asset, * for example, we shouldn't be able to make an asset archived if it's currently assigned * to someone/something. */ if ($request->filled('status_id')) { $updated_status = Statuslabel::find($request->input('status_id')); // We cannot assign a non-deployable status type if the asset is already assigned. // This could probably be added to a form request. // If the asset isn't assigned, we don't care what the status is. // Otherwise we need to make sure the status type is still a deployable one. if ( ($asset->assigned_to == '') || ($updated_status->deployable == '1') && ($asset->assetstatus->deployable == '1') ) { $asset->status_id = $updated_status->id; } } /** * We're changing the location ID - figure out which location we should apply * this change to: * * 0 - RTD location only * 1 - location ID and RTD location ID * 2 - location ID only * * Note: this is kinda dumb and we should just use human-readable values IMHO. - snipe */ if ($request->filled('rtd_location_id')) { if (($request->filled('update_real_loc')) && (($request->input('update_real_loc')) == '0')) { $this->update_array['rtd_location_id'] = $request->input('rtd_location_id'); } if (($request->filled('update_real_loc')) && (($request->input('update_real_loc')) == '1')) { $this->update_array['location_id'] = $request->input('rtd_location_id'); $this->update_array['rtd_location_id'] = $request->input('rtd_location_id'); } if (($request->filled('update_real_loc')) && (($request->input('update_real_loc')) == '2')) { $this->update_array['location_id'] = $request->input('rtd_location_id'); } } /** * ------------------------------------------------------------------------------ * ANYTHING that happens past this foreach * WILL NOT BE logged in the edit log_meta data * ------------------------------------------------------------------------------ */ $changed = []; foreach ($this->update_array as $key => $value) { if ($this->update_array[$key] != $asset->{$key}) { $changed[$key]['old'] = $asset->{$key}; $changed[$key]['new'] = $this->update_array[$key]; } } /** * Start all the custom fields shenanigans */ // Does the model have a fieldset? if ($asset->model->fieldset) { foreach ($asset->model->fieldset->fields as $field) { if ((array_key_exists($field->db_column, $this->update_array)) && ($field->field_encrypted == '1')) { $decrypted_old = Helper::gracefulDecrypt($field, $asset->{$field->db_column}); /* * Check if the decrypted existing value is different from one we just submitted * and if not, pull it out of the object since it shouldn't really be updating at all. * If we don't do this, it will try to re-encrypt it, and the same value encrypted two * different times will have different values, so it will *look* like it was updated * but it wasn't. */ if ($decrypted_old != $this->update_array[$field->db_column]) { $asset->{$field->db_column} = \Crypt::encrypt($this->update_array[$field->db_column]); } else { /* * Remove the encrypted custom field from the update_array, since nothing changed */ unset($this->update_array[$field->db_column]); unset($asset->{$field->db_column}); } /* * These custom fields aren't encrypted, just carry on as usual */ } else { if ((array_key_exists($field->db_column, $this->update_array)) && ($asset->{$field->db_column} != $this->update_array[$field->db_column])) { // Check if this is an array, and if so, flatten it if (is_array($this->update_array[$field->db_column])) { $asset->{$field->db_column} = implode(', ', $this->update_array[$field->db_column]); } else { $asset->{$field->db_column} = $this->update_array[$field->db_column]; } } } } // endforeach } // Check if it passes validation, and then try to save if (!$asset->update($this->update_array)) { // Build the error array foreach ($asset->getErrors()->toArray() as $key => $message) { for ($x = 0; $x < count($message); $x++) { $error_array[$key][] = trans('general.asset') . ' ' . $asset->id . ': ' . $message[$x]; $has_errors++; } } } // end if saved } // end asset foreach if ($has_errors > 0) { return redirect($bulk_back_url)->with('bulk_asset_errors', $error_array); } return redirect($bulk_back_url)->with('success', trans('admin/hardware/message.update.success')); } // no values given, nothing to update return redirect($bulk_back_url)->with('warning', trans('admin/hardware/message.update.nothing_updated')); } /** * Array to store update data per item * @var array */ private $update_array; /** * Adds parameter to update array for an item if it exists in request * @param string $field field name * @return BulkAssetsController Model for Chaining */ protected function conditionallyAddItem($field) { if (request()->filled($field)) { $this->update_array[$field] = request()->input($field); } return $this; } /** * Save bulk deleted. * * @author [A. Gianotto] [] * @param Request $request * @return View * @throws \Illuminate\Auth\Access\AuthorizationException * @internal param array $assets * @since [v2.0] */ public function destroy(Request $request) { $this->authorize('delete', Asset::class); $bulk_back_url = route('hardware.index'); if ($request->session()->has('bulk_back_url')) { $bulk_back_url = $request->session()->pull('bulk_back_url'); } if ($request->filled('ids')) { $assets = Asset::find($request->get('ids')); foreach ($assets as $asset) { $update_array['deleted_at'] = date('Y-m-d H:i:s'); $update_array['assigned_to'] = null; DB::table('assets') ->where('id', $asset->id) ->update($update_array); } // endforeach return redirect($bulk_back_url)->with('success', trans('admin/hardware/message.delete.success')); // no values given, nothing to update } return redirect($bulk_back_url)->with('error', trans('admin/hardware/message.delete.nothing_updated')); } /** * Show Bulk Checkout Page * @return View View to checkout multiple assets */ public function showCheckout() { $this->authorize('checkout', Asset::class); // Filter out assets that are not deployable. return view('hardware/bulk-checkout'); } /** * Process Multiple Checkout Request * @return View */ public function storeCheckout(AssetCheckoutRequest $request) { $this->authorize('checkout', Asset::class); try { $admin = Auth::user(); $target = $this->determineCheckoutTarget(); if (! is_array($request->get('selected_assets'))) { return redirect()->route('hardware.bulkcheckout.show')->withInput()->with('error', trans('admin/hardware/message.checkout.no_assets_selected')); } $asset_ids = array_filter($request->get('selected_assets')); if (request('checkout_to_type') == 'asset') { foreach ($asset_ids as $asset_id) { if ($target->id == $asset_id) { return redirect()->back()->with('error', 'You cannot check an asset out to itself.'); } } } $checkout_at = date('Y-m-d H:i:s'); if (($request->filled('checkout_at')) && ($request->get('checkout_at') != date('Y-m-d'))) { $checkout_at = e($request->get('checkout_at')); } $expected_checkin = ''; if ($request->filled('expected_checkin')) { $expected_checkin = e($request->get('expected_checkin')); } $errors = []; DB::transaction(function () use ($target, $admin, $checkout_at, $expected_checkin, $errors, $asset_ids, $request) { foreach ($asset_ids as $asset_id) { $asset = Asset::findOrFail($asset_id); $this->authorize('checkout', $asset); $error = $asset->checkOut($target, $admin, $checkout_at, $expected_checkin, e($request->get('note')), $asset->name, null); if ($target->location_id != '') { $asset->location_id = $target->location_id; $asset->unsetEventDispatcher(); $asset->save(); } if ($error) { array_merge_recursive($errors, $asset->getErrors()->toArray()); } } }); if (! $errors) { // Redirect to the new asset page return redirect()->to('hardware')->with('success', trans('admin/hardware/message.checkout.success')); } // Redirect to the asset management page with error return redirect()->route('hardware.bulkcheckout.show')->with('error', trans('admin/hardware/message.checkout.error'))->withErrors($errors); } catch (ModelNotFoundException $e) { return redirect()->route('hardware.bulkcheckout.show')->with('error', $e->getErrors()); } } public function restore(Request $request) { $this->authorize('update', Asset::class); $assetIds = $request->get('ids'); if (empty($assetIds)) { return redirect()->route('hardware.index')->with('error', trans('admin/hardware/message.restore.nothing_updated')); } else { foreach ($assetIds as $key => $assetId) { $asset = Asset::withTrashed()->find($assetId); $asset->restore(); } return redirect()->route('hardware.index')->with('success', trans('admin/hardware/message.restore.success')); } } }