Miguel Nogueira
5f1f92a9ce
This commit fixes some superficial instances of Broken Access Control (https://owasp.org/www-project-top-ten/OWASP_Top_Ten_2017/Top_10-2017_A5-Broken_Access_Control). There may be some more instances of this, as authorization was only done after most of the controllers were done (big mistake). Some refactoring was also performed, where Route Model Binding with DI (dependency injection) was used whenever possible, to increase testability of the codebase. Some reused code was also moved to Helper classes as to enforce DRY; There may be some lines of code that are still copy-pasted from other parts of the codebase for reuse. Non-breaking refactoring changes were made, but the app as a whole still needs full manual testing, and customised responses to HTTP 500 responses. Some errors are also not handled gracefully and this wasn't checked in this commit.
251 lines
10 KiB
PHP
251 lines
10 KiB
PHP
@extends('adminlte::page')
|
|
|
|
@section('title', 'Raspberry Network | Open Positions')
|
|
|
|
@section('content_header')
|
|
|
|
@if (Auth::user()->hasAnyRole('admin', 'hiringManager'))
|
|
<h4>Administration / Open Positions</h4>
|
|
@else
|
|
<h4>Application Access Denied</h4>
|
|
@endif
|
|
|
|
@stop
|
|
|
|
@section('js')
|
|
|
|
@if (session()->has('success'))
|
|
|
|
<script>
|
|
toastr.success("{{session('success')}}")
|
|
</script>
|
|
|
|
@elseif(session()->has('error'))
|
|
<script>
|
|
toastr.error("{{session('error')}}")
|
|
</script>
|
|
@endif
|
|
|
|
@if($errors->any())
|
|
|
|
@foreach ($errors->all() as $error)
|
|
<script>toastr.error('{{$error}}', 'Validation error!')</script>
|
|
@endforeach
|
|
|
|
@endif
|
|
|
|
@stop
|
|
|
|
@section('content')
|
|
@if (Auth::user()->hasAnyRole('admin', 'hiringManager'))
|
|
<!-- todo: switch to modal component -->
|
|
<div class="modal fade" tabindex="-1" id="newVacancyForm" role="dialog" aria-labelledby="modalFormLabel" aria-hidden="true">
|
|
<div class="modal-dialog" role="document">
|
|
<div class="modal-content">
|
|
<div class="modal-header">
|
|
<h5 class="modal-title" id="modalFormLabel">New Vacancy</h5>
|
|
<button type="button" class="close" data-dismiss="modal" aria-label="Close">
|
|
<span aria-hidden="true">×</span>
|
|
</button>
|
|
</div>
|
|
<div class="modal-body">
|
|
|
|
@if(!$forms->isEmpty())
|
|
|
|
<form id="savePositionForm" action="{{route('savePosition')}}" method="POST">
|
|
@csrf
|
|
<label for="vacancyName">Vacancy name (e.g. Helper)</label>
|
|
<input type="text" id="vacancyName" name="vacancyName" class="form-control">
|
|
|
|
<label for="vacancyDescription">Vacancy Description</label>
|
|
<input type="text" id="vacancyDescription" name="vacancyDescription" class="form-control">
|
|
|
|
<label for="vacancyFullDescription">Vacancy Details</label>
|
|
<textarea name="vacancyFullDescription" class="form-control" rel="txtTooltip" title="Add things like admission requirements, rank resposibilities and roles, and anything else you feel is necessary" data-toggle="tooltip" data-placement="bottom"></textarea>
|
|
<span class="right text-muted"><i class="fab fa-markdown"></i> Markdown supported</span>
|
|
<div class="row mt-3">
|
|
|
|
<div class="col">
|
|
<label for="pgroup">Permission Group Name</label>
|
|
<input rel="txtTooltip" title="The permission group from your server/network's permissions manager. Compatible with Luckperms and PEX." data-toggle="tooltip" data-placement="bottom" type="text" id="pgroup" name="permissionGroup" class="form-control">
|
|
</div>
|
|
|
|
<div class="col">
|
|
<label for="discordrole">Discord Role ID (*)</label>
|
|
<input rel="txtTooltip" title="Discord Desktop: Go to your Account Settings > Appearance -> Advanced and toggle Developer Mode. On your server's roles tab, right click any role to copy it's ID." data-toggle="tooltip" data-placement="bottom" type="text" id="discordrole" name="discordRole" class="form-control">
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div class="form-group mt-4">
|
|
|
|
<label for="associatedForm">Application form</label>
|
|
<select class="custom-select" name="vacancyFormID" id="associatedForm">
|
|
|
|
<option disabled>Select a form...</option>
|
|
@foreach($forms as $form)
|
|
|
|
<option value="{{$form->id}}">{{$form->formName}}</option>
|
|
|
|
@endforeach
|
|
|
|
</select>
|
|
|
|
<label for="vacancyCount">Free slots</label>
|
|
<input rel="txtTooltip" title="How many submissions before the vacancy stops accepting new applicants?" data-toggle="tooltip" data-placement="bottom" type="text" id="vacancyCount" name="vacancyCount" class="form-control">
|
|
|
|
|
|
</div>
|
|
</form>
|
|
|
|
@else
|
|
|
|
<div class="alert alert-danger">
|
|
|
|
<p>
|
|
You cannot create a vacancy without any forms with which people would apply.
|
|
Please create a form first, then, create a vacancy.
|
|
A single form is allowed to have multiple vacancies, so you can attach future vacancies to the same form if you'd like.
|
|
</p>
|
|
</div>
|
|
|
|
@endif
|
|
|
|
</div>
|
|
<div class="modal-footer">
|
|
|
|
@if(!$forms->isEmpty())
|
|
<button type="button" class="btn btn-primary" onclick="document.getElementById('savePositionForm').submit()">Add Vacancy</button>
|
|
@endif
|
|
|
|
<button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="row">
|
|
|
|
<div class="col-md-4 offset-md-4 text-center">
|
|
|
|
<div class="card">
|
|
|
|
<div class="card-body">
|
|
|
|
<button type="button" class="btn btn-primary" onclick="$('#newVacancyForm').modal('show')">NEW POSITION</button>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div class="row">
|
|
|
|
<div class="col">
|
|
|
|
<div class="card bg-gray-dark">
|
|
|
|
<div class="card-header bg-indigo">
|
|
<div class="card-title"><h4 class="text-bold">Open Vacancies</h4></div>
|
|
</div>
|
|
|
|
<div class="card-body">
|
|
|
|
@if(!$vacancies->isEmpty())
|
|
|
|
<table class="table table-active table-borderless" style="white-space: nowrap">
|
|
|
|
<thead>
|
|
|
|
<tr>
|
|
<th>Name</th>
|
|
<th>Description</th>
|
|
<th>Discord Role ID</th>
|
|
<th>Perm. Group Name</th>
|
|
<th>Open Slots</th>
|
|
<th>Status</th>
|
|
<th>Created On</th>
|
|
<th>Actions</th>
|
|
</tr>
|
|
|
|
</thead>
|
|
|
|
<tbody>
|
|
|
|
@foreach($vacancies as $vacancy)
|
|
|
|
<tr>
|
|
<td>{{$vacancy->vacancyName}}</td>
|
|
<td>{{substr($vacancy->vacancyDescription, 0, 20)}}...</td>
|
|
<td><span class="badge badge-success">{{$vacancy->discordRoleID}}</span></td>
|
|
<td><span class="badge badge-success">{{$vacancy->permissionGroupName}}</span></td>
|
|
<td>{{$vacancy->vacancyCount}}</td>
|
|
@if($vacancy->vacancyStatus == 'OPEN')
|
|
<td><span class="badge badge-success">OPEN</span></td>
|
|
@else
|
|
<td><span class="badge badge-danger">CLOSED</span></td>
|
|
@endif
|
|
<td>{{$vacancy->created_at}}</td>
|
|
<td>
|
|
|
|
<button type="button" class="btn btn-sm btn-warning" onclick="window.location.href='{{ route('editPosition', ['position' => $vacancy->id]) }}'"><i class="fas fa-edit"></i></button>
|
|
|
|
@if ($vacancy->vacancyStatus == 'OPEN')
|
|
|
|
<form action="{{route('updatePositionAvailability', ['status' => 'close', 'vacancy' => $vacancy->id])}}" method="POST" id="closePosition" style="display: inline">
|
|
@csrf
|
|
@method('PATCH')
|
|
<button type="submit" class="btn btn-sm btn-danger"><i class="fa fa-ban"></i></button>
|
|
</form>
|
|
|
|
@else
|
|
|
|
<form action="{{route('updatePositionAvailability', ['status' => 'open', 'vacancy' => $vacancy->id])}}" method="POST" id="openPosition" style="display: inline">
|
|
@csrf
|
|
@method('PATCH')
|
|
<button type="submit" class="btn btn-sm btn-success"><i class="fa fa-check"></i></button>
|
|
</form>
|
|
|
|
@endif
|
|
|
|
</td>
|
|
</tr>
|
|
|
|
@endforeach
|
|
|
|
</tbody>
|
|
|
|
</table>
|
|
|
|
@else
|
|
|
|
<div class="alert alert-warning">
|
|
<p>Nothing to see here! Open some vacancies first. This will get applicants pouring in! (hopefully)</p>
|
|
</div>
|
|
|
|
@endif
|
|
</div>
|
|
|
|
<div class="card-footer">
|
|
|
|
<button type="button" class="btn btn-outline-primary" onclick="window.location.href='{{route('showForms')}}'">MANAGE APPLICATION FORMS</button>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
@else
|
|
<x-no-permission type="danger"></x-no-permission>
|
|
@endif
|
|
@stop
|
|
|
|
@section('footer')
|
|
@include('breadcrumbs.dashboard.footer')
|
|
@stop
|