mirror of
https://github.com/snipe/snipe-it.git
synced 2024-12-25 21:54:14 -08:00
48bbbe0f40
* adds permission checks for companies * adds permission checks for depreciations * adds permission check for all reports * fixes permissions for departments * fixes permission naming (edit -> update) * fixes authorization checking wrong permission in API The authorization was checking for the non-existent „edit“ method where it should have checked for the „update“ method. * adds authorization checks for select2 lists * adds missing authorization checks for api * fixes user authorization check for creating users * adds additional check viewing assets on showing a users assets * Removes authorization checks for select2 lists Reference: https://github.com/snipe/snipe-it/pull/5807#pullrequestreview-136018755
244 lines
7.6 KiB
PHP
244 lines
7.6 KiB
PHP
<?php
|
|
namespace App\Http\Controllers\Api;
|
|
|
|
use App\Models\AssetModel;
|
|
use App\Models\Asset;
|
|
use App\Http\Controllers\Controller;
|
|
use App\Helpers\Helper;
|
|
use Illuminate\Http\Request;
|
|
use App\Http\Transformers\AssetModelsTransformer;
|
|
use App\Http\Transformers\AssetsTransformer;
|
|
use App\Http\Transformers\SelectlistTransformer;
|
|
|
|
|
|
/**
|
|
* This class controls all actions related to asset models for
|
|
* the Snipe-IT Asset Management application.
|
|
*
|
|
* @version v4.0
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
*/
|
|
class AssetModelsController extends Controller
|
|
{
|
|
/**
|
|
* Display a listing of the resource.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @since [v4.0]
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function index(Request $request)
|
|
{
|
|
$this->authorize('view', AssetModel::class);
|
|
$allowed_columns = ['id','image','name','model_number','eol','notes','created_at','manufacturer','assets_count'];
|
|
|
|
$assetmodels = AssetModel::select([
|
|
'models.id',
|
|
'models.image',
|
|
'models.name',
|
|
'model_number',
|
|
'eol',
|
|
'models.notes',
|
|
'models.created_at',
|
|
'category_id',
|
|
'manufacturer_id',
|
|
'depreciation_id',
|
|
'fieldset_id',
|
|
'models.deleted_at',
|
|
'models.updated_at',
|
|
])
|
|
->with('category','depreciation', 'manufacturer','fieldset')
|
|
->withCount('assets');
|
|
|
|
|
|
|
|
if ($request->has('status')) {
|
|
$assetmodels->onlyTrashed();
|
|
}
|
|
|
|
if ($request->has('search')) {
|
|
$assetmodels->TextSearch($request->input('search'));
|
|
}
|
|
|
|
$offset = $request->input('offset', 0);
|
|
$limit = $request->input('limit', 50);
|
|
$order = $request->input('order') === 'asc' ? 'asc' : 'desc';
|
|
$sort = in_array($request->input('sort'), $allowed_columns) ? $request->input('sort') : 'models.created_at';
|
|
|
|
switch ($sort) {
|
|
case 'manufacturer':
|
|
$assetmodels->OrderManufacturer($order);
|
|
break;
|
|
default:
|
|
$assetmodels->orderBy($sort, $order);
|
|
break;
|
|
}
|
|
|
|
|
|
|
|
$total = $assetmodels->count();
|
|
$assetmodels = $assetmodels->skip($offset)->take($limit)->get();
|
|
return (new AssetModelsTransformer)->transformAssetModels($assetmodels, $total);
|
|
}
|
|
|
|
|
|
/**
|
|
* Store a newly created resource in storage.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @since [v4.0]
|
|
* @param \Illuminate\Http\Request $request
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function store(Request $request)
|
|
{
|
|
$this->authorize('create', AssetModel::class);
|
|
$assetmodel = new AssetModel;
|
|
$assetmodel->fill($request->all());
|
|
|
|
if ($assetmodel->save()) {
|
|
return response()->json(Helper::formatStandardApiResponse('success', $assetmodel, trans('admin/models/message.create.success')));
|
|
}
|
|
return response()->json(Helper::formatStandardApiResponse('error', null, $assetmodel->getErrors()));
|
|
|
|
}
|
|
|
|
/**
|
|
* Display the specified resource.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @since [v4.0]
|
|
* @param int $id
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function show($id)
|
|
{
|
|
$this->authorize('view', AssetModel::class);
|
|
$assetmodel = AssetModel::withCount('assets')->findOrFail($id);
|
|
return (new AssetModelsTransformer)->transformAssetModel($assetmodel);
|
|
}
|
|
|
|
/**
|
|
* Display the specified resource's assets
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @since [v4.0]
|
|
* @param int $id
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function assets($id)
|
|
{
|
|
$this->authorize('view', AssetModel::class);
|
|
$assets = Asset::where('model_id','=',$id)->get();
|
|
return (new AssetsTransformer)->transformAssets($assets, $assets->count());
|
|
}
|
|
|
|
|
|
/**
|
|
* Update the specified resource in storage.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @since [v4.0]
|
|
* @param \Illuminate\Http\Request $request
|
|
* @param int $id
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function update(Request $request, $id)
|
|
{
|
|
$this->authorize('update', AssetModel::class);
|
|
$assetmodel = AssetModel::findOrFail($id);
|
|
$assetmodel->fill($request->all());
|
|
$assetmodel->fieldset_id = $request->get("custom_fieldset_id");
|
|
|
|
if ($assetmodel->save()) {
|
|
return response()->json(Helper::formatStandardApiResponse('success', $assetmodel, trans('admin/models/message.update.success')));
|
|
}
|
|
|
|
return response()->json(Helper::formatStandardApiResponse('error', null, $assetmodel->getErrors()));
|
|
}
|
|
|
|
/**
|
|
* Remove the specified resource from storage.
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @since [v4.0]
|
|
* @param int $id
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function destroy($id)
|
|
{
|
|
$this->authorize('delete', AssetModel::class);
|
|
$assetmodel = AssetModel::findOrFail($id);
|
|
$this->authorize('delete', $assetmodel);
|
|
|
|
if ($assetmodel->assets()->count() > 0) {
|
|
return response()->json(Helper::formatStandardApiResponse('error', null, trans('admin/models/message.assoc_users')));
|
|
}
|
|
|
|
if ($assetmodel->image) {
|
|
try {
|
|
unlink(public_path().'/uploads/models/'.$assetmodel->image);
|
|
} catch (\Exception $e) {
|
|
\Log::error($e);
|
|
}
|
|
}
|
|
|
|
$assetmodel->delete();
|
|
return response()->json(Helper::formatStandardApiResponse('success', null, trans('admin/models/message.delete.success')));
|
|
|
|
}
|
|
|
|
/**
|
|
* Gets a paginated collection for the select2 menus
|
|
*
|
|
* @author [A. Gianotto] [<snipe@snipe.net>]
|
|
* @since [v4.0.16]
|
|
* @see \App\Http\Transformers\SelectlistTransformer
|
|
*
|
|
*/
|
|
public function selectlist(Request $request)
|
|
{
|
|
|
|
$assetmodels = AssetModel::select([
|
|
'models.id',
|
|
'models.name',
|
|
'models.image',
|
|
'models.model_number',
|
|
'models.manufacturer_id',
|
|
'models.category_id',
|
|
])->with('manufacturer','category');
|
|
|
|
$settings = \App\Models\Setting::getSettings();
|
|
|
|
if ($request->has('search')) {
|
|
$assetmodels = $assetmodels->SearchByManufacturerOrCat($request->input('search'));
|
|
}
|
|
|
|
$assetmodels = $assetmodels->OrderCategory('ASC')->OrderManufacturer('ASC')->orderby('models.name', 'asc')->orderby('models.model_number', 'asc')->paginate(50);
|
|
|
|
foreach ($assetmodels as $assetmodel) {
|
|
|
|
$assetmodel->use_text = '';
|
|
|
|
if ($settings->modellistCheckedValue('category')) {
|
|
$assetmodel->use_text .= (($assetmodel->category) ? e($assetmodel->category->name).' - ' : '');
|
|
}
|
|
|
|
if ($settings->modellistCheckedValue('manufacturer')) {
|
|
$assetmodel->use_text .= (($assetmodel->manufacturer) ? e($assetmodel->manufacturer->name).' ' : '');
|
|
}
|
|
|
|
$assetmodel->use_text .= e($assetmodel->name);
|
|
|
|
if (($settings->modellistCheckedValue('model_number')) && ($assetmodel->model_number!='')) {
|
|
$assetmodel->use_text .= ' (#'.e($assetmodel->model_number).')';
|
|
}
|
|
|
|
$assetmodel->use_image = ($settings->modellistCheckedValue('image') && ($assetmodel->image)) ? url('/').'/uploads/models/'.$assetmodel->image : null;
|
|
}
|
|
|
|
return (new SelectlistTransformer)->transformSelectlist($assetmodels);
|
|
}
|
|
|
|
}
|