diff --git a/app/Http/Controllers/AssetModelsFilesController.php b/app/Http/Controllers/AssetModelsFilesController.php new file mode 100644 index 000000000..5064027ff --- /dev/null +++ b/app/Http/Controllers/AssetModelsFilesController.php @@ -0,0 +1,155 @@ +] + * @param AssetFileRequest $request + * @param int $modelId + * @return Redirect + * @since [v1.0] + * @throws \Illuminate\Auth\Access\AuthorizationException + */ + public function store(AssetFileRequest $request, $modelId = null) + { + if (! $model = AssetModel::find($modelId)) { + return redirect()->route('models.index')->with('error', trans('admin/hardware/message.does_not_exist')); + } + + $this->authorize('update', $model); + + if ($request->hasFile('file')) { + if (! Storage::exists('private_uploads/assetmodels')) { + Storage::makeDirectory('private_uploads/assetmodels', 775); + } + + foreach ($request->file('file') as $file) { + + $extension = $file->getClientOriginalExtension(); + $file_name = 'model-'.$model->id.'-'.str_random(8).'-'.str_slug(basename($file->getClientOriginalName(), '.'.$extension)).'.'.$extension; + + // Check for SVG and sanitize it + if ($extension=='svg') { + \Log::debug('This is an SVG'); + + $sanitizer = new Sanitizer(); + $dirtySVG = file_get_contents($file->getRealPath()); + $cleanSVG = $sanitizer->sanitize($dirtySVG); + + try { + Storage::put('private_uploads/assetmodels/'.$file_name, $cleanSVG); + } catch (\Exception $e) { + \Log::debug('Upload no workie :( '); + \Log::debug($e); + } + } else { + Storage::put('private_uploads/assetmodels/'.$file_name, file_get_contents($file)); + } + + + $model->logUpload($file_name, e($request->get('notes'))); + } + + return redirect()->back()->with('success', trans('admin/hardware/message.upload.success')); + } + + return redirect()->back()->with('error', trans('admin/hardware/message.upload.nofiles')); + } + + /** + * Check for permissions and display the file. + * + * @author [A. Gianotto] [] + * @param int $modelId + * @param int $fileId + * @since [v1.0] + * @return View + * @throws \Illuminate\Auth\Access\AuthorizationException + */ + public function show($modelId = null, $fileId = null, $download = true) + { + $model = AssetModel::find($modelId); + // the asset is valid + if (isset($model->id)) { + $this->authorize('view', $model); + + if (! $log = Actionlog::find($fileId)) { + return response('No matching record for that model/file', 500) + ->header('Content-Type', 'text/plain'); + } + + $file = 'private_uploads/assetmodels/'.$log->filename; + \Log::debug('Checking for '.$file); + + + if (! Storage::exists($file)) { + return response('File '.$file.' not found on server', 404) + ->header('Content-Type', 'text/plain'); + } + + if ($download != 'true') { + if ($contents = file_get_contents(Storage::url($file))) { + return Response::make(Storage::url($file)->header('Content-Type', mime_content_type($file))); + } + + return JsonResponse::create(['error' => 'Failed validation: '], 500); + } + + return StorageHelper::downloader($file); + } + // Prepare the error message + $error = trans('admin/hardware/message.does_not_exist', ['id' => $fileId]); + + // Redirect to the hardware management page + return redirect()->route('hardware.index')->with('error', $error); + } + + /** + * Delete the associated file + * + * @author [A. Gianotto] [] + * @param int $modelId + * @param int $fileId + * @since [v1.0] + * @return View + * @throws \Illuminate\Auth\Access\AuthorizationException + */ + public function destroy($modelId = null, $fileId = null) + { + $model = AssetModel::find($modelId); + $this->authorize('update', $model); + $rel_path = 'private_uploads/assetmodels'; + + // the asset is valid + if (isset($model->id)) { + $this->authorize('update', $model); + $log = Actionlog::find($fileId); + if ($log) { + if (Storage::exists($rel_path.'/'.$log->filename)) { + Storage::delete($rel_path.'/'.$log->filename); + } + $log->delete(); + + return redirect()->back()->with('success', trans('admin/hardware/message.deletefile.success')); + } + + return redirect()->back() + ->with('success', trans('admin/hardware/message.deletefile.success')); + } + + // Redirect to the hardware management page + return redirect()->route('hardware.index')->with('error', trans('admin/hardware/message.does_not_exist')); + } +} diff --git a/app/Models/AssetModel.php b/app/Models/AssetModel.php index d4d6776a4..e4e5ac720 100755 --- a/app/Models/AssetModel.php +++ b/app/Models/AssetModel.php @@ -20,7 +20,7 @@ class AssetModel extends SnipeModel use HasFactory; use SoftDeletes; protected $presenter = \App\Presenters\AssetModelPresenter::class; - use Requestable, Presentable; + use Loggable, Requestable, Presentable; protected $table = 'models'; protected $hidden = ['user_id', 'deleted_at']; @@ -181,6 +181,23 @@ class AssetModel extends SnipeModel return false; } + /** + * Get uploads for this model + * + * @author [A. Gianotto] [] + * @since [v4.0] + * @return \Illuminate\Database\Eloquent\Relations\Relation + */ + public function uploads() + { + return $this->hasMany('\App\Models\Actionlog', 'item_id') + ->where('item_type', '=', AssetModel::class) + ->where('action_type', '=', 'uploaded') + ->whereNotNull('filename') + ->orderBy('created_at', 'desc'); + } + + /** * ----------------------------------------------- * BEGIN QUERY SCOPES diff --git a/resources/lang/en/general.php b/resources/lang/en/general.php index 94f0001b7..c4d279803 100644 --- a/resources/lang/en/general.php +++ b/resources/lang/en/general.php @@ -362,5 +362,6 @@ return [ 'ldap_import' => 'User password should not be managed by LDAP. (This allows you to send forgotten password requests.)', 'purge_not_allowed' => 'Purging deleted data has been disabled in the .env file. Contact support or your systems administrator.', 'backup_delete_not_allowed' => 'Deleting backups has been disabled in the .env file. Contact support or your systems administrator.', + 'additional_files' => 'Additional Files', ]; \ No newline at end of file diff --git a/resources/views/hardware/view.blade.php b/resources/views/hardware/view.blade.php index 00d28bc4f..f2ff7b797 100755 --- a/resources/views/hardware/view.blade.php +++ b/resources/views/hardware/view.blade.php @@ -177,6 +177,18 @@ +
  • + + + + +
    • + @can('update', \App\Models\Asset::class)
  • @@ -187,6 +199,7 @@
    • @endcan +
    @@ -1207,6 +1220,99 @@
    + +
    +
    +
    + + @if ($asset->model->uploads->count() > 0) + + + + + + + + + + + + + + + + @foreach ($asset->model->uploads as $file) + + + + + + + + + + + @endforeach + +
    {{trans('general.file_type')}}{{ trans('general.image') }}{{ trans('general.file_name') }}{{ trans('general.filesize') }}{{ trans('general.notes') }}{{ trans('general.download') }}{{ trans('general.created_at') }}{{ trans('table.actions') }}
    + @if ( Helper::checkUploadIsImage($file->get_src('assets'))) + + + + @endif + + {{ $file->filename }} + + {{ Helper::formatFilesizeUnits(filesize(storage_path('private_uploads/assetmodels/').$file->filename)) }} + + @if ($file->note) + {{ $file->note }} + @endif + + @if ($file->filename) + + + + @endif + + @if ($file->created_at) + {{ Helper::getFormattedDateObject($file->created_at, 'datetime', false) }} + @endif + + @can('update', \App\Models\AssetModel::class) + + @endcan +
    + + @else + +
    + + {{ trans('general.no_results') }} +
    + @endif + +
    +
    +
    diff --git a/resources/views/models/view.blade.php b/resources/views/models/view.blade.php index 2724632b9..c929aeda8 100755 --- a/resources/views/models/view.blade.php +++ b/resources/views/models/view.blade.php @@ -2,189 +2,346 @@ {{-- Page title --}} @section('title') -{{ trans('admin/models/table.view') }} -{{ $model->model_tag }} + {{ $model->name }} + {{ ($model->model_number) ? '(#'.$model->model_number.')' : '' }} @parent @stop @section('header_right') - @can('update', \App\Models\AssetModel::class) -
    - - -
    - @endcan + @can('update', \App\Models\AssetModel::class) +
    + + +
    + @endcan @stop {{-- Page content --}} @section('content') +
    -
    -
    - @if ($model->id) -
    -
    -

    {{ $model->name }} - {{ ($model->model_number) ? '(#'.$model->model_number.')' : '' }} -

    -
    -
    - @endif -
    +
    +
    - @include('partials.asset-bulk-actions') +
    -
    -
    - - -
    -
    -
    -
    -

    {{ trans('general.moreinfo') }}:

    -
    -
    -
    - - @if ($model->image) - - @endif + + {{ Form::close() }} +
    -
      - @if ($model->manufacturer) -
    • - {{ trans('general.manufacturer') }}: - @can('view', \App\Models\Manufacturer::class) - - {{ $model->manufacturer->name }} - - @else - {{ $model->manufacturer->name }} - @endcan -
      • +
      - @if ($model->manufacturer->url) -
    • - {{ $model->manufacturer->url }} -
      • - @endif +
      +
      - @if ($model->manufacturer->support_url) -
    • - {{ $model->manufacturer->support_url }} -
      • - @endif + @if ($model->uploads->count() > 0) + + + + + + + + + + + + + + - @if ($model->manufacturer->support_phone) -
    • - - {{ $model->manufacturer->support_phone }} + @foreach ($model->uploads as $file) +
      • + + + + + + + + + + @endforeach + +
      {{trans('general.file_type')}}{{ trans('general.image') }}{{ trans('general.file_name') }}{{ trans('general.filesize') }}{{ trans('general.notes') }}{{ trans('general.download') }}{{ trans('general.created_at') }}{{ trans('table.actions') }}
      + @if ( Helper::checkUploadIsImage($file->get_src('assets'))) + + + + @endif + + {{ $file->filename }} + + {{ Helper::formatFilesizeUnits(filesize(storage_path('private_uploads/assetmodels/').$file->filename)) }} + + @if ($file->note) + {{ $file->note }} + @endif + + @if ($file->filename) + + + + @endif + + @if ($file->created_at) + {{ Helper::getFormattedDateObject($file->created_at, 'datetime', false) }} + @endif + + @can('update', \App\Models\AssetModel::class) + + @endcan +
      - - @endif + @else - @if ($model->manufacturer->support_email) -
    • - {{ $model->manufacturer->support_email }} -
      • - @endif +
      + + {{ trans('general.no_results') }} +
      + @endif + +
      +
      + +
      + + +
    +
    +
    + +
    +
    +
    +
    +
    +
    +

    {{ trans('general.moreinfo') }}:

    +
    +
    +
    + + + + @if ($model->image) + @endif - @if ($model->model_number) -
  • - {{ trans('general.model_no') }}: - {{ $model->model_number }} -
    • - @endif - @if ($model->depreciation) -
  • - {{ trans('general.depreciation') }}: - {{ $model->depreciation->name }} ({{ $model->depreciation->months.' '.trans('general.months')}}) -
    • - @endif - @if ($model->eol) -
  • {{ trans('general.eol') }}: - {{ $model->eol .' '. trans('general.months') }} -
    • - @endif +
      + @if ($model->manufacturer) +
    • + {{ trans('general.manufacturer') }}: + @can('view', \App\Models\Manufacturer::class) + + {{ $model->manufacturer->name }} + + @else + {{ $model->manufacturer->name }} + @endcan +
      • - @if ($model->fieldset) -
    • {{ trans('admin/models/general.fieldset') }}: - {{ $model->fieldset->name }} -
      • - @endif + @if ($model->manufacturer->url) +
    • + {{ $model->manufacturer->url }} +
      • + @endif - @if ($model->notes) -
    • - {{ trans('general.notes') }}: - {{ $model->notes }} -
      • - @endif + @if ($model->manufacturer->support_url) +
    • + {{ $model->manufacturer->support_url }} +
      • + @endif + + @if ($model->manufacturer->support_phone) +
    • + + {{ $model->manufacturer->support_phone }} + +
      • + @endif + + @if ($model->manufacturer->support_email) +
    • + {{ $model->manufacturer->support_email }} +
      • + @endif + @endif + @if ($model->model_number) +
    • + {{ trans('general.model_no') }}: + {{ $model->model_number }} +
      • + @endif + + @if ($model->depreciation) +
    • + {{ trans('general.depreciation') }}: + {{ $model->depreciation->name }} ({{ $model->depreciation->months.' '.trans('general.months')}}) +
      • + @endif + + @if ($model->eol) +
    • {{ trans('general.eol') }}: + {{ $model->eol .' '. trans('general.months') }} +
      • + @endif + + @if ($model->fieldset) +
    • {{ trans('admin/models/general.fieldset') }}: + {{ $model->fieldset->name }} +
      • + @endif + + @if ($model->notes) +
    • + {{ trans('general.notes') }}: + {{ $model->notes }} +
      • + @endif - @if ($model->deleted_at!='') -

    • {{ trans('admin/models/general.restore') }}
      • - @endif -
    + @if ($model->deleted_at!='') +

  • {{ trans('admin/models/general.restore') }}
    • + @endif + - @if ($model->note) - Notes: -

    - {!! $model->present()->note() !!} -

    - @endif -
    -
    -
    -
    -
    + @if ($model->note) + Notes: +

    + {!! $model->present()->note() !!} +

    + @endif +
    +
    + + @can('update', \App\Models\AssetModel::class) +
    + {{ trans('admin/models/table.edit') }} +
    + @endcan + + @can('create', \App\Models\AssetModel::class) +
    + {{ trans('admin/models/table.clone') }} +
    + @endcan + + @can('delete', \App\Models\AssetModel::class) + @if ($model->assets->count() > 0) + +
    + {{ trans('general.delete') }} +
    + @else + +
    + {{ trans('general.delete') }} +
    + @endif + @endcan + + + +@can('update', \App\Models\AssetModel::class) + @include ('modals.upload-file', ['item_type' => 'models', 'item_id' => $model->id]) +@endcan @stop @section('moar_scripts') -@include ('partials.bootstrap-table') + @include ('partials.bootstrap-table', ['exportFile' => 'manufacturer' . $model->name . '-export', 'search' => false]) + @stop diff --git a/resources/views/partials/bootstrap-table.blade.php b/resources/views/partials/bootstrap-table.blade.php index f5b55cb7c..2f019e7c1 100644 --- a/resources/views/partials/bootstrap-table.blade.php +++ b/resources/views/partials/bootstrap-table.blade.php @@ -322,6 +322,9 @@ } else if (value.type == 'location') { item_destination = 'locations' item_icon = 'fas fa-map-marker-alt'; + } else if (value.type == 'model') { + item_destination = 'models' + item_icon = ''; } return ' ' + value.name + ''; diff --git a/routes/web/models.php b/routes/web/models.php index 591edb9f2..2643f02d2 100644 --- a/routes/web/models.php +++ b/routes/web/models.php @@ -1,6 +1,7 @@ 'models', 'middleware' => ['auth']], function () { + Route::post('{modelID}/upload', + [AssetModelsFilesController::class, 'store'] + )->name('upload/models'); + + Route::get('{modelID}/showfile/{fileId}/{download?}', + [AssetModelsFilesController::class, 'show'] + )->name('show/modelfile'); + + Route::delete('{modelID}/showfile/{fileId}/delete', + [AssetModelsFilesController::class, 'destroy'] + )->name('delete/modelfile'); + Route::get( '{modelId}/clone', [ @@ -74,6 +87,7 @@ Route::group(['prefix' => 'models', 'middleware' => ['auth']], function () { )->name('models.bulkdelete.store'); + }); Route::resource('models', AssetModelsController::class, [