mirror of
https://github.com/snipe/snipe-it.git
synced 2024-11-20 04:24:23 -08:00
48bbbe0f40
* adds permission checks for companies * adds permission checks for depreciations * adds permission check for all reports * fixes permissions for departments * fixes permission naming (edit -> update) * fixes authorization checking wrong permission in API The authorization was checking for the non-existent „edit“ method where it should have checked for the „update“ method. * adds authorization checks for select2 lists * adds missing authorization checks for api * fixes user authorization check for creating users * adds additional check viewing assets on showing a users assets * Removes authorization checks for select2 lists Reference: https://github.com/snipe/snipe-it/pull/5807#pullrequestreview-136018755
193 lines
6.2 KiB
PHP
Executable file
193 lines
6.2 KiB
PHP
Executable file
<?php
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Helpers\Helper;
|
|
use Lang;
|
|
use App\Models\Depreciation;
|
|
use Redirect;
|
|
use App\Models\Setting;
|
|
use DB;
|
|
use Str;
|
|
use View;
|
|
use Auth;
|
|
use Illuminate\Http\Request;
|
|
|
|
/**
|
|
* This controller handles all actions related to Depreciations for
|
|
* the Snipe-IT Asset Management application.
|
|
*
|
|
* @version v1.0
|
|
*/
|
|
class DepreciationsController extends Controller
|
|
{
|
|
/**
|
|
* Returns a view that invokes the ajax tables which actually contains
|
|
* the content for the depreciation listing, which is generated in getDatatable.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net]
|
|
* @see DepreciationsController::getDatatable() method that generates the JSON response
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Contracts\View\View
|
|
*/
|
|
public function index()
|
|
{
|
|
$this->authorize('view', Depreciation::class);
|
|
|
|
// Show the page
|
|
return view('depreciations/index', compact('depreciations'));
|
|
}
|
|
|
|
|
|
/**
|
|
* Returns a view that displays a form to create a new depreciation.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net]
|
|
* @see DepreciationsController::postCreate()
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Contracts\View\View
|
|
*/
|
|
public function create()
|
|
{
|
|
$this->authorize('create', Depreciation::class);
|
|
|
|
// Show the page
|
|
return view('depreciations/edit')->with('item', new Depreciation);
|
|
}
|
|
|
|
|
|
/**
|
|
* Validates and stores the new depreciation data.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net]
|
|
* @see DepreciationsController::postCreate()
|
|
* @since [v1.0]
|
|
* @param Request $request
|
|
* @return \Illuminate\Http\RedirectResponse
|
|
*/
|
|
public function store(Request $request)
|
|
{
|
|
$this->authorize('create', Depreciation::class);
|
|
|
|
// create a new instance
|
|
$depreciation = new Depreciation();
|
|
// Depreciation data
|
|
$depreciation->name = $request->input('name');
|
|
$depreciation->months = $request->input('months');
|
|
$depreciation->user_id = Auth::id();
|
|
|
|
// Was the asset created?
|
|
if ($depreciation->save()) {
|
|
// Redirect to the new depreciation page
|
|
return redirect()->route('depreciations.index')->with('success', trans('admin/depreciations/message.create.success'));
|
|
}
|
|
return redirect()->back()->withInput()->withErrors($depreciation->getErrors());
|
|
}
|
|
|
|
/**
|
|
* Returns a view that displays a form to update a depreciation.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net]
|
|
* @see DepreciationsController::postEdit()
|
|
* @param int $depreciationId
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Contracts\View\View
|
|
*/
|
|
public function edit($depreciationId = null)
|
|
{
|
|
// Check if the depreciation exists
|
|
if (is_null($item = Depreciation::find($depreciationId))) {
|
|
// Redirect to the blogs management page
|
|
return redirect()->route('depreciations.index')->with('error', trans('admin/depreciations/message.does_not_exist'));
|
|
}
|
|
|
|
$this->authorize('update', $item);
|
|
|
|
return view('depreciations/edit', compact('item'));
|
|
}
|
|
|
|
|
|
/**
|
|
* Validates and stores the updated depreciation data.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net]
|
|
* @see DepreciationsController::getEdit()
|
|
* @param Request $request
|
|
* @param int $depreciationId
|
|
* @return \Illuminate\Http\RedirectResponse
|
|
* @since [v1.0]
|
|
*/
|
|
public function update(Request $request, $depreciationId = null)
|
|
{
|
|
// Check if the depreciation exists
|
|
if (is_null($depreciation = Depreciation::find($depreciationId))) {
|
|
// Redirect to the blogs management page
|
|
return redirect()->route('depreciations.index')->with('error', trans('admin/depreciations/message.does_not_exist'));
|
|
}
|
|
|
|
$this->authorize('update', $depreciation);
|
|
|
|
// Depreciation data
|
|
$depreciation->name = $request->input('name');
|
|
$depreciation->months = $request->input('months');
|
|
|
|
// Was the asset created?
|
|
if ($depreciation->save()) {
|
|
// Redirect to the depreciation page
|
|
return redirect()->route("depreciations.index")->with('success', trans('admin/depreciations/message.update.success'));
|
|
}
|
|
return redirect()->back()->withInput()->withErrors($depreciation->getErrors());
|
|
}
|
|
|
|
/**
|
|
* Validates and deletes a selected depreciation.
|
|
*
|
|
* This is a hard-delete. We do not currently soft-delete depreciations.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net]
|
|
* @since [v1.0]
|
|
* @param integer $depreciationId
|
|
* @return \Illuminate\Http\RedirectResponse
|
|
*/
|
|
public function destroy($depreciationId)
|
|
{
|
|
// Check if the depreciation exists
|
|
if (is_null($depreciation = Depreciation::find($depreciationId))) {
|
|
return redirect()->route('depreciations.index')->with('error', trans('admin/depreciations/message.not_found'));
|
|
}
|
|
|
|
$this->authorize('delete', $depreciation);
|
|
|
|
if ($depreciation->has_models() > 0) {
|
|
// Redirect to the asset management page
|
|
return redirect()->route('depreciations.index')->with('error', trans('admin/depreciations/message.assoc_users'));
|
|
}
|
|
|
|
$depreciation->delete();
|
|
// Redirect to the depreciations management page
|
|
return redirect()->route('depreciations.index')->with('success', trans('admin/depreciations/message.delete.success'));
|
|
}
|
|
|
|
/**
|
|
* Returns a view that displays a form to display depreciation listing
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net]
|
|
* @see DepreciationsController::postEdit()
|
|
* @param int $depreciationId
|
|
* @since [v1.0]
|
|
* @return \Illuminate\Contracts\View\View
|
|
*/
|
|
public function show($id)
|
|
{
|
|
if (is_null($depreciation = Depreciation::find($id))) {
|
|
// Redirect to the blogs management page
|
|
return redirect()->route('depreciations.index')->with('error', trans('admin/depreciations/message.does_not_exist'));
|
|
}
|
|
|
|
$this->authorize('view', $depreciation);
|
|
|
|
return view('depreciations/view', compact('depreciation'));
|
|
}
|
|
|
|
|
|
}
|