Add system settings, audit logging, user management, and dark mode fixes

System Settings:
- Add SystemSettings.vue with Zabbix integration, SMTP/email config, SAML SSO settings
- Add Setting model with key-value storage and typed values
- Add settings API with caching

Audit Logging:
- Add AuditLog model tracking user, IP, action, entity changes
- Add comprehensive audit logging to all CRUD operations:
  - Machines, Computers, Equipment, Network devices, VLANs, Subnets
  - Printers, USB devices (including checkout/checkin)
  - Applications, Settings, Users/Roles
- Track old/new values for all field changes
- Mask sensitive values (passwords, tokens) in logs

User Management:
- Add UsersList.vue with full user CRUD
- Add Role management with granular permissions
- Add 41 predefined permissions across 10 categories
- Add users API with roles and permissions endpoints

Reports:
- Add TonerReport.vue for printer supply monitoring

Dark Mode Fixes:
- Fix map position section in PCForm, PrinterForm
- Fix alert-warning in KnowledgeBaseDetail
- All components now use CSS variables for theming

CLI Commands:
- Add flask seed permissions
- Add flask seed settings

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

plugins/network/api/routes.py

@@ -4,7 +4,7 @@ from flask import Blueprint, request
 from flask_jwt_extended import jwt_required
 
 from shopdb.extensions import db
-from shopdb.core.models import Asset, AssetType, Vendor
+from shopdb.core.models import Asset, AssetType, Vendor, AuditLog
 from shopdb.utils.responses import (
     success_response,
     error_response,
@@ -350,6 +350,12 @@ def create_network_device():
     )
 
     db.session.add(netdev)
+    db.session.flush()
+
+    # Audit log
+    AuditLog.log('created', 'NetworkDevice', entityid=netdev.networkdeviceid,
+                 entityname=data.get('hostname') or data['assetnumber'])
+
     db.session.commit()
 
     result = asset.to_dict()
@@ -396,11 +402,18 @@ def update_network_device(device_id: int):
                 http_code=409
             )
 
+    # Track changes for audit log
+    changes = {}
+
     # Update asset fields
     asset_fields = ['assetnumber', 'name', 'serialnumber', 'statusid',
                     'locationid', 'businessunitid', 'mapleft', 'maptop', 'notes', 'isactive']
     for key in asset_fields:
         if key in data:
+            old_val = getattr(asset, key)
+            new_val = data[key]
+            if old_val != new_val:
+                changes[key] = {'old': old_val, 'new': new_val}
             setattr(asset, key, data[key])
 
     # Update network device fields
@@ -408,8 +421,17 @@ def update_network_device(device_id: int):
                      'firmwareversion', 'portcount', 'ispoe', 'ismanaged', 'rackunit']
     for key in netdev_fields:
         if key in data:
+            old_val = getattr(netdev, key)
+            new_val = data[key]
+            if old_val != new_val:
+                changes[key] = {'old': old_val, 'new': new_val}
             setattr(netdev, key, data[key])
 
+    # Audit log if there were changes
+    if changes:
+        AuditLog.log('updated', 'NetworkDevice', entityid=netdev.networkdeviceid,
+                     entityname=netdev.hostname or asset.assetnumber, changes=changes)
+
     db.session.commit()
 
     result = asset.to_dict()
@@ -433,6 +455,11 @@ def delete_network_device(device_id: int):
 
     # Soft delete the asset
     netdev.asset.isactive = False
+
+    # Audit log
+    AuditLog.log('deleted', 'NetworkDevice', entityid=netdev.networkdeviceid,
+                 entityname=netdev.hostname or netdev.asset.assetnumber)
+
     db.session.commit()
 
     return success_response(message='Network device deleted')
@@ -573,6 +600,12 @@ def create_vlan():
     )
 
     db.session.add(vlan)
+    db.session.flush()
+
+    # Audit log
+    AuditLog.log('created', 'VLAN', entityid=vlan.vlanid,
+                 entityname=f"VLAN {vlan.vlannumber} - {vlan.name}")
+
     db.session.commit()
 
     return success_response(vlan.to_dict(), message='VLAN created', http_code=201)
@@ -604,10 +637,21 @@ def update_vlan(vlan_id: int):
                 http_code=409
             )
 
+    # Track changes for audit log
+    changes = {}
     for key in ['vlannumber', 'name', 'description', 'vlantype', 'isactive']:
         if key in data:
+            old_val = getattr(vlan, key)
+            new_val = data[key]
+            if old_val != new_val:
+                changes[key] = {'old': old_val, 'new': new_val}
             setattr(vlan, key, data[key])
 
+    # Audit log if there were changes
+    if changes:
+        AuditLog.log('updated', 'VLAN', entityid=vlan.vlanid,
+                     entityname=f"VLAN {vlan.vlannumber} - {vlan.name}", changes=changes)
+
     db.session.commit()
     return success_response(vlan.to_dict(), message='VLAN updated')
 
@@ -634,6 +678,11 @@ def delete_vlan(vlan_id: int):
         )
 
     vlan.isactive = False
+
+    # Audit log
+    AuditLog.log('deleted', 'VLAN', entityid=vlan.vlanid,
+                 entityname=f"VLAN {vlan.vlannumber} - {vlan.name}")
+
     db.session.commit()
 
     return success_response(message='VLAN deleted')
@@ -754,6 +803,12 @@ def create_subnet():
     )
 
     db.session.add(subnet)
+    db.session.flush()
+
+    # Audit log
+    AuditLog.log('created', 'Subnet', entityid=subnet.subnetid,
+                 entityname=f"{subnet.cidr} - {subnet.name}")
+
     db.session.commit()
 
     return success_response(subnet.to_dict(), message='Subnet created', http_code=201)
@@ -790,10 +845,21 @@ def update_subnet(subnet_id: int):
                       'locationid', 'dhcpenabled', 'dhcprangestart', 'dhcprangeend',
                       'dns1', 'dns2', 'isactive']
 
+    # Track changes for audit log
+    changes = {}
     for key in allowed_fields:
         if key in data:
+            old_val = getattr(subnet, key)
+            new_val = data[key]
+            if old_val != new_val:
+                changes[key] = {'old': old_val, 'new': new_val}
             setattr(subnet, key, data[key])
 
+    # Audit log if there were changes
+    if changes:
+        AuditLog.log('updated', 'Subnet', entityid=subnet.subnetid,
+                     entityname=f"{subnet.cidr} - {subnet.name}", changes=changes)
+
     db.session.commit()
     return success_response(subnet.to_dict(), message='Subnet updated')
 
@@ -812,6 +878,11 @@ def delete_subnet(subnet_id: int):
         )
 
     subnet.isactive = False
+
+    # Audit log
+    AuditLog.log('deleted', 'Subnet', entityid=subnet.subnetid,
+                 entityname=f"{subnet.cidr} - {subnet.name}")
+
     db.session.commit()
 
     return success_response(message='Subnet deleted')