feat: Aggiunta possibilità prevedere collegamenti sulla barra di navigazione superiore definendoli da DB

lucasalva87 · lucasalva87 · commit 0fa427edaedf · 2026-04-27T16:16:37.000+02:00
diff --git a/include/top.php b/include/top.php
@@ -334,6 +334,19 @@
         <script type="text/javascript" charset="utf-8" src="'.$js.'"></script>';
 }
 
+// Autoload asset da moduli
+// Cerca in modules/{directory}/assets/navbar.js
+foreach (Module::all(['id', 'directory']) as $mod) {
+    if (empty($mod->directory)) {
+        continue;
+    }
+    $relative = '/modules/'.$mod->directory.'/assets/navbar.js';
+    if (file_exists(base_dir().$relative)) {
+        echo '
+        <script type="text/javascript" charset="utf-8" src="'.base_path_osm().$relative.'"></script>';
+    }
+}
+
 // Impostazioni di default per gli alert
 echo '
         <script>
@@ -495,7 +508,7 @@
                             <i class="fa fa-info nav-icon"></i>
                         </a>
                     </li>
-
+                    '.NavbarLinks::renderRight().'
                     <li class="nav-item">
                         <a href="'.base_path_osm().'/index.php?op=logout" onclick="sessionStorage.clear()" class="nav-link bg-danger" title="'.tr('Esci').'">
                             <i class="fa fa-power-off nav-icon"></i>
diff --git a/src/Models/Link.php b/src/Models/Link.php
@@ -0,0 +1,83 @@
+<?php
+
+/*
+ * OpenSTAManager: il software gestionale open source per l'assistenza tecnica e la fatturazione
+ * Copyright (C) DevCode s.r.l.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+namespace Models;
+
+use Common\SimpleModelTrait;
+use Illuminate\Database\Eloquent\Model;
+use Traits\RecordTrait;
+
+/**
+ * Voce della Navbar Right/Left (tabella `zz_links`).
+ *
+ * Campi traducibili (`label`, `title`) vivono in `zz_links_lang` — vedi RecordTrait.
+ */
+class Link extends Model
+{
+    use SimpleModelTrait;
+    use RecordTrait;
+
+    protected $table = 'zz_links';
+
+    protected static $translated_fields = [
+        'label',
+        'title',
+    ];
+
+    public function parent()
+    {
+        return $this->belongsTo(self::class, 'parent');
+    }
+
+    public function children()
+    {
+        return $this->hasMany(self::class, 'parent')->orderBy('order');
+    }
+
+    public function hostModule()
+    {
+        return $this->belongsTo(Module::class, 'id_module');
+    }
+
+    public function hasChildren(): bool
+    {
+        return $this->children()->exists();
+    }
+
+    public function getLabelAttribute(): string
+    {
+        return (string) $this->getTranslation('label');
+    }
+
+    public function getTitleAttribute(): string
+    {
+        return (string) $this->getTranslation('title');
+    }
+
+    public static function getTranslatedFields()
+    {
+        return self::$translated_fields;
+    }
+
+    public function getModuleAttribute()
+    {
+        return $this->hostModule ? $this->hostModule->name : null;
+    }
+}
diff --git a/src/NavbarLinks.php b/src/NavbarLinks.php
@@ -0,0 +1,215 @@
+<?php
+
+/*
+ * OpenSTAManager: il software gestionale open source per l'assistenza tecnica e la fatturazione
+ * Copyright (C) DevCode s.r.l.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+use Illuminate\Database\Eloquent\Collection;
+use Models\Link;
+use Models\Module;
+use Models\Plugin;
+
+/**
+ * Helper per il rendering delle voci navbar dalla tabella `zz_links`.
+ *
+ * `renderRight()` / `renderLeft()` ritornano HTML pronto per essere concatenato
+ * dentro `include/top.php`. Ogni campo DB è escapato via `e()`.
+ */
+class NavbarLinks
+{
+    /** Regex di sicurezza per value di type=javascript (nome funzione globale). */
+    private const JS_VALUE_REGEX = '/^[a-zA-Z_$][a-zA-Z0-9_$.]*$/';
+
+    public static function renderRight(): string
+    {
+        return self::renderPosition('right');
+    }
+
+    public static function renderLeft(): string
+    {
+        return self::renderPosition('left');
+    }
+
+    private static function renderPosition(string $position): string
+    {
+        $links = self::getTopLevelLinks($position);
+
+        $html = '';
+        foreach ($links as $link) {
+            if (!self::visible($link)) {
+                continue;
+            }
+            $html .= self::renderItem($link);
+        }
+
+        return $html;
+    }
+
+    private static function getTopLevelLinks(string $position): Collection
+    {
+        return Link::query()
+            ->where('position', $position)
+            ->whereNull('parent')
+            ->where('enabled', 1)
+            ->orderBy('order')
+            ->with(['children' => function ($q) {
+                $q->where('enabled', 1)->orderBy('order');
+            }])
+            ->get();
+    }
+
+    private static function renderItem(Link $link): string
+    {
+        if ($link->hasChildren()) {
+            return self::renderDropdown($link);
+        }
+
+        return self::renderSingle($link);
+    }
+
+    private static function renderSingle(Link $link): string
+    {
+        $iconClass = trim($link->icon.' nav-icon '.(string) $link->color);
+
+        return '<li class="nav-item">'
+            .'<a href="'.e(self::url($link)).'" class="nav-link" '
+            .self::onclickAttr($link).' '
+            .self::targetAttr($link).' '
+            .'title="'.e($link->title).'">'
+            .'<i class="'.e($iconClass).'"></i>'
+            .'</a>'
+            .'</li>';
+    }
+
+    private static function renderDropdown(Link $link): string
+    {
+        $iconClass = trim($link->icon.' nav-icon '.(string) $link->color);
+
+        $items = '';
+        foreach ($link->children as $child) {
+            if (!self::visible($child)) {
+                continue;
+            }
+            $childIcon = trim($child->icon.' '.(string) $child->color);
+            $items .= '<a class="dropdown-item" href="'.e(self::url($child)).'" '
+                .self::onclickAttr($child).' '
+                .self::targetAttr($child).' '
+                .'title="'.e($child->title).'">'
+                .'<i class="'.e($childIcon).'"></i> '
+                .e($child->label)
+                .'</a>';
+        }
+
+        return '<li class="nav-item dropdown">'
+            .'<a href="#" class="nav-link dropdown-toggle" data-toggle="dropdown" '
+            .'title="'.e($link->title).'">'
+            .'<i class="'.e($iconClass).'"></i>'
+            .'</a>'
+            .'<div class="dropdown-menu dropdown-menu-right">'
+            .$items
+            .'</div>'
+            .'</li>';
+    }
+
+    public static function url(Link $link): string
+    {
+        switch ($link->type) {
+            case 'link':
+                return (string) $link->value;
+
+            case 'javascript':
+                return '#';
+
+            case 'module':
+                $mod = Module::where('name', $link->value)->first();
+                if (!$mod) {
+                    return '#';
+                }
+
+                return base_path_osm().'/controller.php?id_module='.$mod->id;
+
+            case 'plugin':
+                $plg = Plugin::where('name', $link->value)->first();
+                if (!$plg) {
+                    return '#';
+                }
+
+                return base_path_osm().'/plugin_editor.php?id_plugin='.$plg->id;
+        }
+
+        return '#';
+    }
+
+    public static function onclickAttr(Link $link): string
+    {
+        if ($link->type !== 'javascript') {
+            return '';
+        }
+
+        $fn = (string) $link->value;
+        if (!preg_match(self::JS_VALUE_REGEX, $fn)) {
+            return '';
+        }
+
+        return 'onclick="if(typeof window[\''.$fn.'\']===\'function\'){window[\''.$fn.'\']();}return false;"';
+    }
+
+    public static function targetAttr(Link $link): string
+    {
+        return $link->type === 'link' ? 'target="_blank"' : '';
+    }
+
+    public static function visible(Link $link): bool
+    {
+        if (!$link->enabled) {
+            return false;
+        }
+
+        if ($link->type === 'module') {
+            $mod = Module::where('name', $link->value)->first();
+            if (!$mod || !$mod->enabled) {
+                return false;
+            }
+
+            return Modules::getPermission($mod->id) !== '-';
+        }
+
+        if ($link->type === 'plugin') {
+            $plg = Plugin::where('name', $link->value)->first();
+            if (!$plg || !$plg->enabled) {
+                return false;
+            }
+
+            return $plg->permission !== '-';
+        }
+
+        if ($link->id_module) {
+            return Modules::getPermission($link->id_module) !== '-';
+        }
+
+        return true;
+    }
+
+    public static function validateValue(string $type, string $value): bool
+    {
+        if ($type === 'javascript') {
+            return (bool) preg_match(self::JS_VALUE_REGEX, $value);
+        }
+
+        return true;
+    }
+}
diff --git a/update/2_11.sql b/update/2_11.sql
@@ -324,3 +324,47 @@ INSERT INTO `zz_views_lang` (`id_lang`, `id_record`, `title`) VALUES
 
 -- Aggiunta del campo serial alla tabella my_componenti per la gestione dei seriali nei componenti degli impianti
 ALTER TABLE `my_componenti` ADD `serial` VARCHAR(255) NULL AFTER `id_articolo`;
+
+-- Tabelle per la gestione DB-driven delle voci della Navbar Right Menu.
+-- I moduli consumer aggiungono righe qui invece di iniettare <li> via JS DOM-manipulation.
+CREATE TABLE IF NOT EXISTS `zz_links` (
+    `id`         INT(11)      NOT NULL AUTO_INCREMENT,
+    `name`       VARCHAR(255) NOT NULL,
+    `icon`       VARCHAR(255) NOT NULL DEFAULT '',
+    `color`      VARCHAR(64)  NULL DEFAULT NULL,
+    `position`   ENUM('right','left') NOT NULL DEFAULT 'right',
+    `order`      INT(11)      NOT NULL DEFAULT 0,
+    `enabled`    TINYINT(1)   NOT NULL DEFAULT 1,
+    `type`       ENUM('link','javascript','module','plugin') NOT NULL,
+    `value`      VARCHAR(500) NOT NULL,
+    `parent`     INT(11)      NULL DEFAULT NULL,
+    `id_module`  INT(11)      NULL DEFAULT NULL,
+    `created_at` TIMESTAMP    NULL DEFAULT CURRENT_TIMESTAMP,
+    `updated_at` TIMESTAMP    NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    PRIMARY KEY (`id`),
+    UNIQUE KEY `uk_zz_links_name` (`name`),
+    KEY `idx_zz_links_parent` (`parent`),
+    KEY `idx_zz_links_enabled_order` (`enabled`, `order`),
+    KEY `idx_zz_links_id_module` (`id_module`),
+    CONSTRAINT `fk_zz_links_parent`
+        FOREIGN KEY (`parent`) REFERENCES `zz_links`(`id`) ON DELETE CASCADE ON UPDATE RESTRICT,
+    CONSTRAINT `fk_zz_links_module`
+        FOREIGN KEY (`id_module`) REFERENCES `zz_modules`(`id`) ON DELETE SET NULL ON UPDATE RESTRICT
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+CREATE TABLE IF NOT EXISTS `zz_links_lang` (
+    `id`         INT(11)      NOT NULL AUTO_INCREMENT,
+    `id_lang`    INT(11)      NOT NULL,
+    `id_record`  INT(11)      NOT NULL,
+    `label`      VARCHAR(255) NOT NULL DEFAULT '',
+    `title`      VARCHAR(255) NOT NULL DEFAULT '',
+    `created_at` TIMESTAMP    NULL DEFAULT CURRENT_TIMESTAMP,
+    `updated_at` TIMESTAMP    NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    PRIMARY KEY (`id`),
+    UNIQUE KEY `uk_zz_links_lang_record` (`id_lang`, `id_record`),
+    KEY `idx_zz_links_lang_record` (`id_record`),
+    CONSTRAINT `fk_zz_links_lang_record`
+        FOREIGN KEY (`id_record`) REFERENCES `zz_links`(`id`) ON DELETE CASCADE ON UPDATE RESTRICT,
+    CONSTRAINT `fk_zz_links_lang_lang`
+        FOREIGN KEY (`id_lang`)   REFERENCES `zz_langs`(`id`)  ON DELETE CASCADE ON UPDATE RESTRICT
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
