allerta-vvf/backend/app/Http/Controllers/LogsController.php

63 lines
2.1 KiB
PHP

<?php
namespace App\Http\Controllers;
use App\Models\Log;
use App\Models\User;
use App\Utils\DBTricks;
use Illuminate\Http\Request;
use Carbon\Carbon;
class LogsController extends Controller
{
/**
* List all logs
*/
public function index(Request $request)
{
User::where('id', $request->user()->id)->update(['last_access' => now()]);
$request->validate([
'from' => 'date',
'to' => 'date'
]);
$query = Log::join('users as changed_user', 'changed_user.id', '=', 'logs.changed_id')
->join('users as editor_user', 'editor_user.id', '=', 'logs.editor_id')
->orderBy('created_at', 'desc');
$selectedCols = [
"logs.id", "logs.action", "logs.editor_id", "logs.changed_id", "logs.created_at", "logs.source_type",
DBTricks::nameSelect("changed", "changed_user"), DBTricks::nameSelect("editor", "editor_user"), "editor_user.hidden as editor_hidden"
];
if($request->has('from')) {
try {
$from = Carbon::parse($request->input('from'));
$query->whereDate('logs.created_at', '>=', $from->toDateString());
} catch (\Carbon\Exceptions\InvalidFormatException $e) { }
}
if($request->has('to')) {
try {
$to = Carbon::parse($request->input('to'));
$query->whereDate('logs.created_at', '<=', $to->toDateString());
} catch (\Carbon\Exceptions\InvalidFormatException $e) { }
}
if($request->user()->hasPermission("logs-limited-read")) {
$query = $query->where(function ($query) {
$query->where('editor_user.hidden', false)
->orWhere('editor_user.id', auth()->user()->id);
});
} else if($request->user()->hasPermission("logs-read")) {
$selectedCols = array_merge($selectedCols, ["logs.ip", "logs.user_agent"]);
} else {
abort(401);
}
return response()->json(
$query->select($selectedCols)->get()
);
}
}