snipe-it/app/Http/Controllers
Till Deeke 27699aa99c Adds permission checks for custom fields and custom fieldsets (#5645) (#5795)
* adds permission checks to custom fields

* adds permission checks to custom fieldsets

* adds separate permissions for custom fieldsets

* check for permissions in views

* Removes custom fieldsets from permissions config

* Proxy the authorization for custom fieldsets down to custom fields.

This allows us to use the existing permissions in use and have more semantically correct authorization checks for custom fieldsets.

* simplifies the authorization check for the custom fields overview

* removes special handling of custom fieldsets in base policy

I just realised that this code duplicates the logic from the custom fieldset policy.
Since we are checking for the authorization of custom fields anyway, we can just use the columnName for the fields.

* cleanup of unused imports
2018-07-12 18:28:20 -07:00
..
Api Fixing authorization issues (#5807) 2018-07-12 18:28:02 -07:00
Auth Authentication via REMOTE_USER (clean repull) (#5204) 2018-03-14 12:48:07 -07:00
AccessoriesController.php Check for valid accessory category 2018-04-23 16:04:01 -07:00
ActionlogController.php Discussion: Moving to policies for controller based authorization (#3080) 2016-12-19 11:04:28 -08:00
AssetMaintenancesController.php Create asset maintenance - Added orange bar for required asset to edit view (#5520) 2018-05-16 19:23:23 -07:00
AssetModelsController.php Feature/custom fields default values (#5389) 2018-04-23 21:16:55 -07:00
AssetsController.php Improved files display 2018-05-02 14:13:06 -07:00
CategoriesController.php Fixed misc UI permissions elements 2018-01-20 04:39:31 -08:00
CompaniesController.php Fixing authorization issues (#5807) 2018-07-12 18:28:02 -07:00
ComponentsController.php Fixed incorrect component not found string 2018-02-22 16:36:01 -08:00
ConsumablesController.php Notification improvements (#5254) 2018-03-25 13:46:57 -07:00
Controller.php Updated docblocks 2016-04-07 13:21:09 -07:00
CustomFieldsController.php Adds permission checks for custom fields and custom fieldsets (#5645) (#5795) 2018-07-12 18:28:20 -07:00
CustomFieldsetsController.php Adds permission checks for custom fields and custom fieldsets (#5645) (#5795) 2018-07-12 18:28:20 -07:00
DashboardController.php Call migrate before passport install 2017-10-11 12:42:31 -07:00
DepartmentsController.php Fixing authorization issues (#5807) 2018-07-12 18:28:02 -07:00
DepreciationsController.php Fixing authorization issues (#5807) 2018-07-12 18:28:02 -07:00
GroupsController.php Prepopulate ther groups array on create 2017-12-05 18:17:11 -08:00
ImportsController.php Fixed #5217 - permissions error with importer for non-admins 2018-03-22 14:17:44 -07:00
LicensesController.php Added license categories 2018-05-04 21:01:38 -07:00
LocationsController.php Fixed misc UI permissions elements 2018-01-20 04:39:31 -08:00
ManufacturersController.php Fixed manufacturer restore 2018-03-03 19:14:27 -08:00
ModalController.php Added “new” buttons for manufacturer and category in asset model creation 2017-12-19 20:30:46 -08:00
ProfileController.php Use ImageUploadRequest $request on user profile update 2017-12-06 14:42:14 -08:00
ReportsController.php Fixing authorization issues (#5807) 2018-07-12 18:28:02 -07:00
SettingsController.php Added option to include model information on asset labels. (#5301) 2018-07-12 18:23:12 -07:00
StatuslabelsController.php Fixed #5138 - added default_label flag to status labels 2018-03-05 22:04:16 -08:00
SuppliersController.php Fixed misc UI permissions elements 2018-01-20 04:39:31 -08:00
UsersController.php Could should not be equal to 1 2018-05-16 19:38:02 -07:00
ViewAssetsController.php De-normalize new counters from 4.3.0 (#5547) 2018-05-16 19:20:43 -07:00