-
-
Notifications
You must be signed in to change notification settings - Fork 29
Asset Tag Numbering Developer Guide
Since 3.1.0 Β· Built by Sandy (@srinivasansanthosh) in PR #164, merged with the changes in the review Β· User side: QR asset labels
How FreeITSM gives a new asset the next tag in sequence (AST-00042), and how every write of a tag β typed, generated or edited β is kept unique within a company.
| File | Role |
|---|---|
includes/services/asset_tags.php |
AssetTagsService β settings, validateFormat(), preview(), generate(), createWithTag(), assign(), withLock()
|
api/assets/get_asset_tag_settings.php, save_asset_tag_settings.php
|
The settings tab's read and write (Cap::ASSETS_TAGS) |
api/assets/asset_tag_preview.php |
Live preview β writes nothing |
api/assets/save_asset_tag.php |
The tag box on an asset β now AssetTagsService::assign()
|
asset_tag_counters |
The counters (counter_key PK, registered in db_verify.php's $primaryKeys) |
tests/asset-tag-numbering.php |
29 checks |
3.0.0 shipped ticket numbering you choose the shape of. Asset tags use the same model rather than a second one:
| Setting | Notes | |
|---|---|---|
| On/off | asset_tag_autogen_enabled |
Per company. Off by default β an upgrade changes nothing. |
| Format | asset_tag_format |
Per company. Default AST-{#####}. Rendered by TicketNumbering::render() itself, so the tokens and their rules are identical: {###} is a minimum width, never a limit; {COMPANY} is the company's ticket code. |
| Start | asset_tag_start |
Per company. Used the first time a counter is claimed. |
| Scope | asset_tag_scope |
Install-wide. per_company (default β tags only have to be unique within a company) or global. |
Sandy's original had five settings β prefix, suffix, padding, initial number, enabled. A format string is those in one line, and the day somebody asks for {COMPANY}-LT-{####} it simply works, with no new settings and no migration.
validateFormat() allows exactly one number token, {YYYY} {YY} {MM} {DD} {COMPANY}, and letters, digits and - _ . /. {TYPE} is refused β it's a ticket type. The 64-character column limit is checked against a rendered six-digit number with a long stand-in company code.
INSERT INTO asset_tag_counters (counter_key, next_value) VALUES (?, ?)
ON DUPLICATE KEY UPDATE next_value = LAST_INSERT_ID(next_value + 1)The same statement, and the same rowCount() trap, as TicketNumbering::claimNext() β read that method's comment. next_value holds the last number issued. Keys: asset:co<id> per company (0 = Default, so never NULL), or asset for global.
-
Uniqueness is proven, not assumed. After claiming,
generate()checks the tag against the company's assets; if it is taken (a restored backup, tags typed by hand) it winds the counter forward with a doubling stride β but the first retry lands on the very next number ($seq + $step - 1), because stickers are printed in runs and a needless gap reads as a missing asset. Ticket numbering skips one there; tags don't. -
Forward only.
setNextNumber()and every wind useGREATEST(). A number on a sticker is never handed out again. -
Rolls back with a failed asset.
createWithTag()claims the number inside the transaction that inserts the asset, so a failed insert gives it back. If the caller already has a transaction, it joins it and neither commits nor rolls back itself. (Sandy's requirement, kept.)
Per-company uniqueness lives in code (assetTagAvailable()), because a UNIQUE (tenant_id, asset_tag) index cannot hold for the Default company β see the NULL trap. A check-then-write must be serialised, and every path that writes a tag goes through AssetTagsService::withLock() β a MySQL named lock, freeitsm_asset_tag_co<id>, which fails closed:
| Path | Method |
|---|---|
| A tag typed on create (screen, REST, import) |
createAsset() β createWithTag()
|
| A generated tag (any creator, agents and Intune included) |
createWithTag() β generate()
|
| A tag changed on an existing asset |
assign() (save_asset_tag.php) |
Two paths with two locks β as the branch first had it, a lock for typed tags only β would let a typed AST-00005 and a generated AST-00005 both through.
noteManualTag(): a typed tag with the generated shape and a number ahead of the counter winds the counter past it, so the generator never has to skip it later.
A clash names the asset that has the tag (clashMessage()): "That tag is already on LAPTOP-12."
AssetTagsService::withSettings([...]) / forget() is the house override (TicketNumbering's pattern), so a test never writes the install's real settings. php tests/asset-tag-numbering.php β 29 checks: formats and preview; a failed create returns its number (the one check run with the service owning its transaction, failing before anything is written); consecutive tags; a taken tag skipped without a gap; typed tags kept, winding the counter, refused on a clash with the other asset named; assign() with history; forward-only; scope keys; off means no tag; and an agent-found asset tagged too. Everything else is in one rolled-back transaction, rows prefixed ZZTAG-.
- Bulk renumbering β ticket numbering has it as a migration tool; asset tags are on physical stickers, so renumbering means re-labelling. Wait until somebody needs it.
- Immutable tags β the QR token is the asset's permanent physical identity, so a tag can change (with history) and every printed label still scans.
- Per-type or per-location rules β the format string leaves room for tokens; none are needed yet.
See also: Asset reconciliation β Developer Guide Β· QR asset labels β Developer Guide Β· The review (PR #164) Β· Developer Tests β Assets
FreeITSM β an open-source IT Service Management platform Β· github.com/edmozley/freeitsm Β· MIT licence
- Installation
- β° Scheduled tasks (cron jobs)
- Architecture
- π§ͺ Developer tests
- AI Providers
- Internationalisation (i18n)
- Timezones & Time Handling
- π Date & Time Formats
- Theming & Dark Mode
- ποΈ Recent β getting back to what you were doing
- β¨οΈ Command palette (βK)
- π Searching inside tickets
- π Attached documents
-
MobileβFriendly
- β³ π« Mobile: Tickets
- β³ π» Mobile: Assets
- β³ π Mobile: Calendar
- β³ π Mobile: Knowledge
- β³ π¦ Mobile: Service Status
- β³ πΌ Mobile: Watchtower
- β³ π§© Mobile: Problem Management
- β³ π Mobile: Change Management
- β³ πΏ Mobile: Software
- β³ β Mobile: Tasks
- β³ π Mobile: Forms
- β³ π Mobile: Contracts
- β³ π Mobile: Domains
- β³ π Mobile: People
- β³ π Mobile: LMS
- β³ πΊοΈ Mobile: CMDB
- β³ πΊοΈ Mobile: Network Mapper
- β³ π§ Mobile: Process Mapper
- β³ βοΈ Mobile: Workflow
- β³ π₯οΈ Mobile: System
- β³ π Mobile: Reporting
- β³ π Mobile: System Wiki
- β³ π Mobile: Self-Service Portal
- β³ π§° Mobile: Techniques & Tricks
-
Security
- Layer 1 β which modules you can enter
- β³ π§© Module Access Control
- β³ π οΈ Module Access β Developer Guide
- Layer 2 β what you can administer
- β³ π Roles & Permissions
- β³ π οΈ Roles β Developer Guide
- β³ π€ Why capabilities are constants
- Layer 3 β the System module
- β³ π Admin Access Control
- Hardening
- β³ π Security review response 2026-08
- β³ π‘οΈ Security hardening 2026-08
- β³ π οΈ Security hardening 2026-08 β Developer Guide
- β³ π‘οΈ Round three β plain English
- β³ π οΈ Round three β Developer Guide
- β³ π‘οΈ CSRF protection (S4) β Developer Guide
- Single Sign-On (SSO)
- ποΈ LDAP & Active Directory
- π CardDAV contact sync
- Browser Extension
- API Reference
-
π REST API β how it works
- β³ π« REST API: Tickets
- β³ π» REST API: Assets
- β³ π΄ REST API: Problems
- β³ π REST API: Changes
- β³ π REST API: Knowledge
- β³ β REST API: Tasks
- β³ ποΈ REST API: CMDB
- β³ π REST API: Contracts
- β³ ποΈ REST API: Calendar
- β³ πΏ REST API: Software
- β³ π REST API: Domains
- β³ π¦ REST API: Service Status
- β³ βοΈ REST API: Morning Checks
- β³ π REST API: Forms
- β³ βοΈ REST API: Workflow
- β³ π·οΈ REST API: Cost centres
- β³ πΊοΈ REST API: Network Mapper
- β³ π§ Using the API docs page
- β³ π OpenAPI specification
- β³ β OpenAPI: kept correct
- β³ π οΈ Maintaining the catalogue
- Watchtower
-
Tickets
- β³ π Rota copy and paste β Developer Deep Dive
- β³ β Checklists & SOPs
- β³ βοΈ Mandatory fields
- β³ π·οΈ Ticket categories
- β³ π₯ Assigning tickets to a team, and escalation
- β³ π’ One board across every company
- β³ Mailbox Authentication
- β³ π€ Email send log
- β³ Basic IMAP mailboxes
- β³ Email rendering & images
- β³ SLA Management
- β³ WhatsApp channel
-
β³
βοΈ Telegram channel - β³ β CSAT company scope and filters β Developer Guide
- β³ π₯ Microsoft Teams channel
- β³ π¨οΈ Mattermost channel
- β³ π¬ Web chat channel
- β³ π£ Slack channel
- β³ π Linking tickets
- β³ β Record previews
- β³ π Ticket notes: internal or shared
- β³ ποΈ Canned responses
- β³ βοΈ Limiting replies to particular senders
- β³ π¨ Telling the analyst a ticket is theirs
- β³ βοΈ Email signatures
- β³ π The public web address
- β³ π’ Ticket numbering
- β³ π Raising a ticket for someone else
- β³ π Merging tickets
- β³ π Confidential tickets
- β³ π₯ Portal managers
- β³ π Who has seen a ticket
- β³ π Reading long tickets
- β³ β Splitting tickets
- β³ β Selecting several tickets
- β³ ποΈ The folder pane
- β³ π½ Just my tickets, or no closed ones
- β³ π οΈ Snoozing tickets β Developer Guide
- β³ π₯ Collision detection
- β³ β±οΈ Time tracking
- β³ π Scheduled work in your own calendar
- Problem Management
- Tasks
-
Assets
- β³ π’ Moving an asset between companies
- β³ π Shared asset locations
- β³ π§βπΌ Assigning assets to analysts
- β³ π Warranty and lease alerts
- β³ π Saved table views
- β³ π¨οΈ Recording anything, and importing it
- β³ π·οΈ QR asset labels
- β³ π Who holds what, and handover documents
- β³ π₯οΈ The inventory agent (PowerShell)
- β³ ποΈ Proxmox VE servers
- β³ βοΈ VMware Cloud Director servers
- β³ π Linking equipment to tickets
- β³ βοΈ Follow-up tasks on a ticket
- Knowledge
- Change Management
- Calendar
- Morning Checks
- Reporting
- Software
-
Forms
- β³ π¨ The form designer β Developer Guide
- β³ π Layout & the grid β Developer Guide
- β³ ποΈ Collections β grouping submissions
- β³ π Submissions as PDFs
- β³ β‘ What happens next β a form's own actions
- β³ π οΈ Sections & conditional logic β Developer Guide
- β³ π οΈ Lookup fields β Developer Guide
- β³ π‘οΈ Catalogue request approvals
- People
- Domains
- Contracts
- Service Status
- π Notifications
- π¨ War Room
- Self-Service Portal
- LMS
- Process Mapper
- CMDB
- Network Mapper
- Workflows
- Issue trackers (Jira, Azure DevOps)
- System
-
Overview
- β³ π Progress tracker
- β³ Concepts & vocabulary
- β³ Email routing & mailboxes
- β³ Settings: global vs per-company
- β³ Users & self-service
- β³ Staff cross-company access
- β³ π’ One board across every company
- β³ Worked examples
- β³ Pitfalls & gotchas
- β³ Scope: what it's for
- β³ π οΈ Developer Guide (make a module multi-company)
- β³ ποΈ Case study: CMDB (a linked graph)
- β³ π§ͺ Test harness (prove it's isolated)
- What this is
-
π Bugs resolved
- β³ πΌοΈ Logo and courses broke on Apache with PHP-FPM
- β³ π’ Chat tickets ignored your ticket numbering
- β³ π Dates shown as a dash, or in server time
- β³ π Assets β Users showed people from other companies
- β³ π Restricted analysts could read other modules' data
- β³ πΌοΈ Replies with a picture in the thread failed to send
- β³ π Reply attachments never reached the customer
- β³ π οΈ Outbound email attachments β Developer Guide
- β³ π A global SSO provider was missing from the portal
- β³ π Behind a proxy, the SSO redirect said http
- β³ βοΈ The portal tagline moved when you saved it
- β³ π¨ The portal settings screen forgot what you saved
- β³ π‘οΈ The approvals inbox said "Error" and nothing else
- β³ π A table's answers were missing from the PDF
- β³ β A single-select column let you tick every option
- β³ π The portal ignored a form's field widths
- β³ π The tasks board stopped taking clicks
- β³ ποΈ #121 The index list is out of date after upgrading
- β³ π #133 The calendar subscription was empty
- β³ π #131 Tasks always reopened on the board
- β³ π₯ #129 Every page returned HTTP 500 after upgrading
- β³ π³ #127 A PHP warning above the System page
- β³ π #126 Notes stamped with the server's clock
- β³ π Storing every date in UTC
- β³ πͺ The portal was down for everyone signed in
- β³ βοΈ #120 Workflow notes could never be written
- β³ βοΈ #123 Three errors when running Database Verification
- β³ π #122 The description box was a stub in the corner
- β³ π£ Demo data deleted real accounts
- β³ π #117 Sign-in redirected to the wrong address
- β³ π¨ #108 The priority dot was invisible
- β³ β±οΈ #116 Time logged from the right-click menu
- β³ π #114 API keys refused by our own guard
- β³ ποΈ #110 Assigning a task told nobody
- β³ πͺ #107 Signed out while still working
- β³ π #103 "Share with Requester" reached nobody
- β³ π #102 Search found nothing for hyphens
- β³ πͺ #101 Source code editor opened behind
- β³ βοΈ #88 Subtasks could not be ticked off
- β³ π» #84 Asset deep link selected nothing
- β³ π« #79 A new ticket arrived with no status
- β³ π§ #79 A ticket from email did not say so
- β³ π #78 Bell opened to nothing
- β³ π¬ #77 Mail only collected from Inbox
- β³ π #74 The default password could not be changed
- β³ π¦ #70 Renaming an impact level
- β³ π€ #67 App-only mailboxes could not send
- β³ π #45 Verify only ever worked for Microsoft
- β³ π #45 IMAP reported as not authenticated
- β³ βοΈ An email template stopped escaping itself
- β³ π The portal dashboard showed the wrong time
- β³ π’ The folder said 99 and the list showed 96