mirror of
https://github.com/snipe/snipe-it.git
synced 2024-12-24 13:14:07 -08:00
323c3807fa
* Make delete routes work. We put a little form in the modal that spoofs the delete field.
* Fix route on creating a user.
* Fix redundant id parameter.
* Port acceptance tests to new urls.
* Initial work on migrating to model based policies instead of global gates. Will allow for much more detailed permissions bits in the future.
* This needs to stay for the dashboard checks.
* Add user states for permissions to build tests.
* Build up unit tests for gates/permissions. Move accessories/consumables/assets to policies instead of in authserviceprovider
* Migrate various locations to new syntax. Update test to be more specific
* Fix functional tests.
Add an artisan command for installing a settings setup on travis-ci
* Try a different id... Need to come up with a better way of passing the id for tests that need an existing one.
* Try to fix travis
* Update urls to use routes and not hardcode old paths. Also fix some migration errors found along the way.:
* Add a environment for travis functional tests.
* Adjust config file to make travis use it.
* Use redirect()->route instead of redirect()-to
* Dump all failures in the output directory if travis fails.
* Cleanups and minor fixes.
* Adjust the supplier modelfactory to comply with new validation restrictions.
* Some test fixes.
* Locales can be longer than 5 characters according to faker... fex gez_ET. Increase lenght in mysql and add a validation
* Update test database dump to latest migrations.
* Extend Supplier phone/fax length.
This catches issues found in testing with a phone number with a five digit extension. fex (356) 654-3024 x36632
Also move away from escaping all values put into eloquent. Eloquent
already uses PDO parameter binding, and this was leading to names like
Mr Ryan O'Malley turning into an html escaped version of that name when
stored. All values should be escaped when using {{}}, we'll just have
to be more cautious when we use {!!, but I think we already are?
* Remove additional escaping here, like we did in suppliers controller.
* No need to eager load all of these relationships when we can call the count on the querybuilder directly
* Work on controller cleanup
* Always start from scrach, catches more issues this way.
* Update sql dump. Remove old code from permissions test.
* Generate a deletable item on demand in the test, rather than relying on one existing. I think we should probably move to mock all the database stuff at some point..
* More travis related fixes
* Break script into multiple functional lines
* Update all controllers to use the new helper, also cleanup syntax and docblocks along the way.
536 lines
21 KiB
PHP
Executable file
536 lines
21 KiB
PHP
Executable file
<?php
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Helpers\Helper;
|
|
use App\Models\Manufacturer;
|
|
use Auth;
|
|
use Exception;
|
|
use Gate;
|
|
use Input;
|
|
use Lang;
|
|
use Redirect;
|
|
use Str;
|
|
use View;
|
|
use Illuminate\Http\Request;
|
|
|
|
/**
|
|
* This controller handles all actions related to Manufacturers for
|
|
* the Snipe-IT Asset Management application.
|
|
*
|
|
* @version v1.0
|
|
*/
|
|
class ManufacturersController extends Controller
|
|
{
|
|
/**
|
|
* Returns a view that invokes the ajax tables which actually contains
|
|
* the content for the manufacturers listing, which is generated in getDatatable.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @see ManufacturersController::getDatatable() method that generates the JSON response
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Contracts\View\View
|
|
*/
|
|
public function index()
|
|
{
|
|
// Show the page
|
|
return View::make('manufacturers/index', compact('manufacturers'));
|
|
}
|
|
|
|
|
|
/**
|
|
* Returns a view that displays a form to create a new manufacturer.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @see ManufacturersController::postCreate()
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Contracts\View\View
|
|
*/
|
|
public function create()
|
|
{
|
|
return View::make('manufacturers/edit')->with('item', new Manufacturer);
|
|
}
|
|
|
|
|
|
/**
|
|
* Validates and stores the data for a new manufacturer.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @see ManufacturersController::postCreate()
|
|
* @since [v1.0]
|
|
* @param Request $request
|
|
* @return \Illuminate\Http\RedirectResponse
|
|
*/
|
|
public function store(Request $request)
|
|
{
|
|
$manufacturer = new Manufacturer;
|
|
$manufacturer->name = $request->input('name');
|
|
$manufacturer->user_id = Auth::id();
|
|
|
|
if ($manufacturer->save()) {
|
|
return redirect()->route('manufacturers.index')->with('success', trans('admin/manufacturers/message.create.success'));
|
|
}
|
|
return redirect()->back()->withInput()->withErrors($manufacturer->getErrors());
|
|
}
|
|
|
|
/**
|
|
* Returns a view that displays a form to edit a manufacturer.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @see ManufacturersController::postEdit()
|
|
* @param int $manufacturerId
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Contracts\View\View
|
|
*/
|
|
public function edit($manufacturerId = null)
|
|
{
|
|
// Check if the manufacturer exists
|
|
if (is_null($item = Manufacturer::find($manufacturerId))) {
|
|
// Redirect to the manufacturer page
|
|
return redirect()->route('manufacturers.index')->with('error', trans('admin/manufacturers/message.does_not_exist'));
|
|
}
|
|
// Show the page
|
|
return View::make('manufacturers/edit', compact('item'));
|
|
}
|
|
|
|
|
|
/**
|
|
* Validates and stores the updated manufacturer data.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @see ManufacturersController::getEdit()
|
|
* @param Request $request
|
|
* @param int $manufacturerId
|
|
* @return \Illuminate\Http\RedirectResponse
|
|
* @since [v1.0]
|
|
*/
|
|
public function update(Request $request, $manufacturerId = null)
|
|
{
|
|
// Check if the manufacturer exists
|
|
if (is_null($manufacturer = Manufacturer::find($manufacturerId))) {
|
|
// Redirect to the manufacturer page
|
|
return redirect()->route('manufacturers.index')->with('error', trans('admin/manufacturers/message.does_not_exist'));
|
|
}
|
|
|
|
// Save the data
|
|
$manufacturer->name = $request->input('name');
|
|
// Was it created?
|
|
if ($manufacturer->save()) {
|
|
// Redirect to the new manufacturer page
|
|
return redirect()->route('manufacturers.index')->with('success', trans('admin/manufacturers/message.update.success'));
|
|
}
|
|
return redirect()->back()->withInput()->withErrors($manufacturer->getErrors());
|
|
}
|
|
|
|
/**
|
|
* Deletes a manufacturer.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @param int $manufacturerId
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Http\RedirectResponse
|
|
*/
|
|
public function destroy($manufacturerId)
|
|
{
|
|
// Check if the manufacturer exists
|
|
if (is_null($manufacturer = Manufacturer::find($manufacturerId))) {
|
|
// Redirect to the manufacturers page
|
|
return redirect()->route('manufacturers.index')->with('error', trans('admin/manufacturers/message.not_found'));
|
|
}
|
|
|
|
if ($manufacturer->has_models() > 0) {
|
|
// Redirect to the asset management page
|
|
return redirect()->route('manufacturers.index')->with('error', trans('admin/manufacturers/message.assoc_users'));
|
|
}
|
|
// Delete the manufacturer
|
|
$manufacturer->delete();
|
|
// Redirect to the manufacturers management page
|
|
return redirect()->route('manufacturers.index')->with('success', trans('admin/manufacturers/message.delete.success'));
|
|
}
|
|
|
|
/**
|
|
* Returns a view that invokes the ajax tables which actually contains
|
|
* the content for the manufacturers detail listing, which is generated in getDatatable.
|
|
* This data contains a listing of all assets that belong to that manufacturer.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @see ManufacturersController::getDataView()
|
|
* @param int $manufacturerId
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Contracts\View\View
|
|
*/
|
|
public function show($manufacturerId = null)
|
|
{
|
|
$manufacturer = Manufacturer::find($manufacturerId);
|
|
|
|
if (isset($manufacturer->id)) {
|
|
return View::make('manufacturers/view', compact('manufacturer'));
|
|
}
|
|
// Prepare the error message
|
|
$error = trans('admin/manufacturers/message.does_not_exist', compact('id'));
|
|
// Redirect to the user management page
|
|
return redirect()->route('manufacturers')->with('error', $error);
|
|
}
|
|
|
|
/**
|
|
* Generates the JSON used to display the manufacturer listings.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @see ManufacturersController::getIndex()
|
|
* @since [v1.0]
|
|
* @param Request $request
|
|
* @return String JSON
|
|
*/
|
|
public function getDatatable(Request $request)
|
|
{
|
|
$manufacturers = Manufacturer::select(array('id','name'))->whereNull('deleted_at');
|
|
|
|
if ($request->has('search')) {
|
|
$manufacturers = $manufacturers->TextSearch(e($request->input('search')));
|
|
}
|
|
$offset = request('offset', 0);
|
|
$limit = request('limit', 50);
|
|
|
|
$allowed_columns = ['id','name'];
|
|
$order = $request->input('order') === 'asc' ? 'asc' : 'desc';
|
|
$sort = in_array($request->input('sort'), $allowed_columns) ? $request->input('sort') : 'created_at';
|
|
|
|
$manufacturers->orderBy($sort, $order);
|
|
|
|
$manufacturersCount = $manufacturers->count();
|
|
$manufacturers = $manufacturers->skip($offset)->take($limit)->get();
|
|
|
|
$rows = array();
|
|
|
|
foreach ($manufacturers as $manufacturer) {
|
|
$actions = '<nobr>';
|
|
$actions .= Helper::generateDatatableButton('edit', route('manufacturers.edit', $manufacturer->id));
|
|
$actions .= Helper::generateDatatableButton(
|
|
'delete',
|
|
route('manufacturers.destroy'),
|
|
true, /*enabled*/
|
|
trans('admin/manufacturers/message.delete.confirm'),
|
|
$manufacturer->name
|
|
);
|
|
$actions .= '</nobr>';
|
|
|
|
$rows[] = array(
|
|
'id' => $manufacturer->id,
|
|
'name' => (string)link_to_route('manufacturers.show', e($manufacturer->name),['manufacturer' => $manufacturer->id]),
|
|
'assets' => $manufacturer->assets()->count(),
|
|
'licenses' => $manufacturer->licenses()->count(),
|
|
'accessories' => $manufacturer->accessories()->count(),
|
|
'consumables' => $manufacturer->consumables()->count(),
|
|
'actions' => $actions
|
|
);
|
|
}
|
|
|
|
$data = array('total' => $manufacturersCount, 'rows' => $rows);
|
|
|
|
return $data;
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
* Generates the JSON used to display the manufacturer detail.
|
|
* This JSON returns data on all of the assets with the specified
|
|
* manufacturer ID number.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @see ManufacturersController::getView()
|
|
* @param int $manufacturerId
|
|
* @param string $itemType
|
|
* @param Request $request
|
|
* @return String JSON* @since [v1.0]
|
|
*/
|
|
public function getDataView($manufacturerId, $itemType = null, Request $request)
|
|
{
|
|
$manufacturer = Manufacturer::find($manufacturerId);
|
|
|
|
switch ($itemType) {
|
|
case "assets":
|
|
return $this->getDataAssetsView($manufacturer, $request);
|
|
case "licenses":
|
|
return $this->getDataLicensesView($manufacturer, $request);
|
|
case "accessories":
|
|
return $this->getDataAccessoriesView($manufacturer, $request);
|
|
case "consumables":
|
|
return $this->getDataConsumablesView($manufacturer, $request);
|
|
}
|
|
|
|
return "We shouldn't be here";
|
|
|
|
}
|
|
|
|
protected function getDataAssetsView(Manufacturer $manufacturer, Request $request)
|
|
{
|
|
$manufacturer = $manufacturer->load('assets.model', 'assets.assigneduser', 'assets.assetstatus', 'assets.company');
|
|
$manufacturer_assets = $manufacturer->assets();
|
|
|
|
if ($request->has('search')) {
|
|
$manufacturer_assets = $manufacturer_assets->TextSearch(e($request->input('search')));
|
|
}
|
|
|
|
$offset = request('offset', 0);
|
|
$limit = request('limit', 50);
|
|
|
|
$order = $request->input('order') === 'asc' ? 'asc' : 'desc';
|
|
|
|
$allowed_columns = ['id','name','serial','asset_tag'];
|
|
$sort = in_array($request->input('sort'), $allowed_columns) ? $request->input('sort') : 'created_at';
|
|
$count = $manufacturer_assets->count();
|
|
$manufacturer_assets = $manufacturer_assets->skip($offset)->take($limit)->get();
|
|
$rows = array();
|
|
|
|
foreach ($manufacturer_assets as $asset) {
|
|
$actions = '<div style="white-space: nowrap;">';
|
|
if ($asset->deleted_at=='') {
|
|
$actions .= Helper::generateDatatableButton('clone', route('clone/hardware', $asset->id));
|
|
$actions .= Helper::generateDatatableButton('edit', route('hardware.edit', $asset->id));
|
|
$actions .= Helper::generateDatatableButton(
|
|
'delete',
|
|
route('hardware.destroy', $asset->id),
|
|
true, /*enabled*/
|
|
trans('admin/hardware/message.delete.confirm'),
|
|
$asset->asset_tag
|
|
);
|
|
} elseif ($asset->deleted_at!='') {
|
|
$actions .= Helper::generateDatatableButton('restore', route('restore/hardware', $asset->id));
|
|
}
|
|
$actions .= '</div>';
|
|
if ($asset->availableForCheckout()) {
|
|
if (Gate::allows('checkout', $asset)) {
|
|
$inout = Helper::generateDatatableButton('checkout', route('checkout/hardware', $asset->id));
|
|
}
|
|
} else {
|
|
if (Gate::allows('checkin', $asset)) {
|
|
$inout = Helper::generateDatatableButton('checkin', route('checkin/hardware', $asset->id));
|
|
}
|
|
}
|
|
|
|
$rows[] = array(
|
|
'id' => $asset->id,
|
|
'name' => (string)link_to_route('hardware.show', e($asset->showAssetName()), [$asset->id]),
|
|
'model' => e($asset->model->name),
|
|
'asset_tag' => e($asset->asset_tag),
|
|
'serial' => e($asset->serial),
|
|
'assigned_to' => ($asset->assigneduser) ? (string)link_to_route('users.show', e($asset->assigneduser->fullName()), [$asset->assigneduser->id]): '',
|
|
'actions' => $actions,
|
|
'companyName' => is_null($asset->company) ? '' : $asset->company->name
|
|
);
|
|
|
|
if (isset($inout)) {
|
|
$row['change'] = $inout;
|
|
}
|
|
}
|
|
|
|
$data = array('total' => $count, 'rows' => $rows);
|
|
return $data;
|
|
}
|
|
|
|
protected function getDataLicensesView(Manufacturer $manufacturer, Request $request)
|
|
{
|
|
$manufacturer = $manufacturer->load('licenses.company', 'licenses.manufacturer', 'licenses.licenseSeatsRelation');
|
|
$licenses = $manufacturer->licenses;
|
|
|
|
if ($request->has('search')) {
|
|
$licenses = $licenses->TextSearch($request->input('search'));
|
|
}
|
|
|
|
$licenseCount = $licenses->count();
|
|
|
|
$rows = array();
|
|
|
|
foreach ($licenses as $license) {
|
|
$actions = '<span style="white-space: nowrap;">';
|
|
|
|
if (Gate::allows('checkout', \App\Models\License::class)) {
|
|
$actions .= Helper::generateDatatableButton(
|
|
'checkout',
|
|
route('licenses.freecheckout', $license->id),
|
|
$license->remaincount() > 0
|
|
);
|
|
}
|
|
|
|
if (Gate::allows('create', $license)) {
|
|
$actions .= Helper::generateDatatableButton('clone', route('clone/license', $license->id));
|
|
}
|
|
if (Gate::allows('update', $license)) {
|
|
$actions .= Helper::generateDatatableButton('edit', route('licenses.edit', $license->id));
|
|
}
|
|
if (Gate::allows('delete', $license)) {
|
|
$actions .= Helper::generateDatatableButton(
|
|
'delete',
|
|
route('licenses.destroy', $license->id),
|
|
true, /*enabled*/
|
|
trans('admin/licenses/message.delete.confirm'),
|
|
$license->name
|
|
);
|
|
}
|
|
$actions .='</span>';
|
|
|
|
$rows[] = array(
|
|
'id' => $license->id,
|
|
'name' => (string) link_to_route('licenses.show', $license->name, [$license->id]),
|
|
'serial' => (string) link_to_route('licenses.show', mb_strimwidth($license->serial, 0, 50, "..."), [$license->id]),
|
|
'totalSeats' => $license->licenseSeatCount,
|
|
'remaining' => $license->remaincount(),
|
|
'license_name' => e($license->license_name),
|
|
'license_email' => e($license->license_email),
|
|
'purchase_date' => ($license->purchase_date) ? $license->purchase_date : '',
|
|
'expiration_date' => ($license->expiration_date) ? $license->expiration_date : '',
|
|
'purchase_cost' => ($license->purchase_cost) ? number_format($license->purchase_cost, 2) : '',
|
|
'purchase_order' => ($license->purchase_order) ? e($license->purchase_order) : '',
|
|
'order_number' => ($license->order_number) ? e($license->order_number) : '',
|
|
'notes' => ($license->notes) ? e($license->notes) : '',
|
|
'actions' => $actions,
|
|
'companyName' => is_null($license->company) ? '' : e($license->company->name),
|
|
'manufacturer' => $license->manufacturer ? (string) link_to_route('manufacturers.show', $license->manufacturer->name, [$license->manufacturer_id]) : ''
|
|
);
|
|
}
|
|
|
|
$data = array('total' => $licenseCount, 'rows' => $rows);
|
|
|
|
return $data;
|
|
}
|
|
|
|
public function getDataAccessoriesView(Manufacturer $manufacturer, Request $request)
|
|
{
|
|
$manufacturer = $manufacturer->load(
|
|
'accessories.location',
|
|
'accessories.company',
|
|
'accessories.category',
|
|
'accessories.manufacturer',
|
|
'accessories.users'
|
|
);
|
|
$accessories = $manufacturer->accessories();
|
|
|
|
if ($request->has('search')) {
|
|
$accessories = $accessories->TextSearch(e($request->input('search')));
|
|
}
|
|
|
|
$offset = request('offset', 0);
|
|
$limit = request('limit', 50);
|
|
|
|
$accessCount = $accessories->count();
|
|
$accessories = $accessories->skip($offset)->take($limit)->get();
|
|
$rows = array();
|
|
|
|
foreach ($accessories as $accessory) {
|
|
|
|
$actions = '<nobr>';
|
|
if (Gate::allows('checkout', $accessory)) {
|
|
$actions .= Helper::generateDatatableButton(
|
|
'checkout',
|
|
route('checkout/accessory', $accessory->id),
|
|
$accessory->numRemaining() > 0
|
|
);
|
|
}
|
|
if (Gate::allows('update', $accessory)) {
|
|
$actions .= Helper::generateDatatableButton('edit', route('accessories.update', $accessory->id));
|
|
}
|
|
if (Gate::allows('delete', $accessory)) {
|
|
$actions .= Helper::generateDatatableButton(
|
|
'delete',
|
|
route('accessories.destroy', $accessory->id),
|
|
$enabled = true,
|
|
trans('admin/accessories/message.delete.confirm'),
|
|
$accessory->name
|
|
);
|
|
}
|
|
$actions .= '</nobr>';
|
|
$company = $accessory->company;
|
|
|
|
$rows[] = array(
|
|
'name' => (string)link_to_route('accessories.show', $accessory->name, [$accessory->id]),
|
|
'category' => ($accessory->category) ? (string)link_to_route('categories.show', $accessory->category->name, [$accessory->category->id]) : '',
|
|
'qty' => e($accessory->qty),
|
|
'order_number' => e($accessory->order_number),
|
|
'min_amt' => e($accessory->min_amt),
|
|
'location' => ($accessory->location) ? e($accessory->location->name): '',
|
|
'purchase_date' => e($accessory->purchase_date),
|
|
'purchase_cost' => number_format($accessory->purchase_cost, 2),
|
|
'numRemaining' => $accessory->numRemaining(),
|
|
'actions' => $actions,
|
|
'companyName' => is_null($company) ? '' : e($company->name),
|
|
'manufacturer' => $accessory->manufacturer ? (string) link_to_route('manufacturers.show', $accessory->manufacturer->name, [$accessory->manufacturer_id]) : ''
|
|
|
|
);
|
|
}
|
|
|
|
$data = array('total'=>$accessCount, 'rows'=>$rows);
|
|
|
|
return $data;
|
|
}
|
|
|
|
public function getDataConsumablesView($manufacturer, Request $request)
|
|
{
|
|
$manufacturer = $manufacturer->load(
|
|
'consumables.location',
|
|
'consumables.company',
|
|
'consumables.category',
|
|
'consumables.manufacturer',
|
|
'consumables.users'
|
|
);
|
|
$consumables = $manufacturer->consumables();
|
|
|
|
if ($request->has('search')) {
|
|
$consumables = $consumables->TextSearch(e($request->input('search')));
|
|
}
|
|
|
|
$offset = request('offset', 0);
|
|
$limit = request('limit', 50);
|
|
|
|
|
|
$consumCount = $consumables->count();
|
|
$consumables = $consumables->skip($offset)->take($limit)->get();
|
|
$rows = array();
|
|
|
|
foreach ($consumables as $consumable) {
|
|
$actions = '<nobr>';
|
|
if (Gate::allows('checkout', $consumable)) {
|
|
$actions .= Helper::generateDatatableButton('checkout', route('checkout/consumable', $consumable->id), $consumable->numRemaining() > 0);
|
|
}
|
|
|
|
if (Gate::allows('update', $consumable)) {
|
|
$actions .= Helper::generateDatatableButton('edit', route('consumables.edit', $consumable->id));
|
|
}
|
|
if (Gate::allows('delete', $consumable)) {
|
|
$actions .= Helper::generateDatatableButton(
|
|
'delete',
|
|
route('consumables.destroy', $consumable->id),
|
|
true, /* enabled */
|
|
trans('admin/consumables/message.delete.confirm'),
|
|
$consumable->name
|
|
);
|
|
}
|
|
|
|
$actions .='</nobr>';
|
|
|
|
$company = $consumable->company;
|
|
|
|
$rows[] = array(
|
|
'id' => $consumable->id,
|
|
'name' => (string)link_to_route('consumables.show', e($consumable->name), [$consumable->id]),
|
|
'location' => ($consumable->location) ? e($consumable->location->name) : '',
|
|
'min_amt' => e($consumable->min_amt),
|
|
'qty' => e($consumable->qty),
|
|
'manufacturer' => ($consumable->manufacturer) ? (string) link_to_route('manufacturers.show', $consumable->manufacturer->name, [$consumable->manufacturer_id]): '',
|
|
'model_number' => e($consumable->model_number),
|
|
'item_no' => e($consumable->item_no),
|
|
'category' => ($consumable->category) ? (string) link_to_route('categories.show', $consumable->category->name, [$consumable->category_id]) : 'Missing category',
|
|
'order_number' => e($consumable->order_number),
|
|
'purchase_date' => e($consumable->purchase_date),
|
|
'purchase_cost' => ($consumable->purchase_cost!='') ? number_format($consumable->purchase_cost, 2): '' ,
|
|
'numRemaining' => $consumable->numRemaining(),
|
|
'actions' => $actions,
|
|
'companyName' => is_null($company) ? '' : e($company->name),
|
|
);
|
|
}
|
|
|
|
$data = array('total' => $consumCount, 'rows' => $rows);
|
|
|
|
return $data;
|
|
}
|
|
}
|