Add audit history

inventory-app/inventory.py

@@ -447,14 +447,29 @@ def view_inventory(slug=None):
 @login_required(groups=["k-space:janitors"])
 def view_inventory_audit(item_id):
     user = read_user()
-    db.inventory.update_one({
+    item = db.inventory.find_one(filter = {
-        "_id": ObjectId(item_id),
+        "_id": ObjectId(item_id)
-    }, {
+    }, projection = {
+        "inventory.audit": 1
+    })
+
+    q = {
         "$set": {
             "inventory.audit.username": user["username"],
             "inventory.audit.timestamp": datetime.utcnow(),
         },
-    })
+    }
+    if item["inventory"].get("audit"):
+        q["$push"] = {
+            "inventory.audit.log": {
+                "username": item["inventory"]["audit"]["username"],
+                "timestamp": item["inventory"]["audit"]["timestamp"],
+            }
+        }
+    db.inventory.update_one({
+        "_id": ObjectId(item_id)
+    }, q)
+
     if request.form and request.form.get("noRedirect", False):
         return {}
     else:

inventory-app/templates/inventory_view.html

@@ -65,13 +65,29 @@
         <td>{{ item.inventory.get("user").username | display_name }}</td>
       </tr>
 
+      {% macro auditLine(timestamp, user) -%}
+          {{ timestamp | timeago }}
+          by
+          {{ user | display_name }}
+      {%- endmacro %}
       <tr>
         <td>Last audited</td>
         <td>
           {% if item.inventory.get("audit") %}
-            {{ item.inventory.audit.timestamp | timeago }}
+            {% if item.inventory.get("audit", {}).get("log") %}
-            by
+              <details>
-            {{ item.inventory.audit.username | display_name }}
+                <summary>
+                  {{ auditLine(item.inventory.audit.timestamp, item.inventory.audit.username) }}
+                </summary>
+                  <ul class="browser-default">
+                    {% for audit in item.inventory.audit.log | reverse %}
+                      <li>{{ auditLine(audit.timestamp, audit.username) }}</li>
+                    {% endfor %}
+                  </ul>
+              </details>
+            {% else %}
+              {{ auditLine(item.inventory.audit.timestamp, item.inventory.audit.username) }}
+            {% endif %}
           {% else %}
             Never
           {% endif %}