<%# The permission picker, shared by the user-edit and group-detail pages. A fieldset of checkboxes — one per permission the installed plugins declare — ticked where this user/group already holds it. The whole set posts back, so what is submitted IS the desired state (see admin-grants.ts). Locals: csrfToken, permissions ({ action, choices, empty, field, legend, submit }). %>

<%= permissions.legend %>

<% if (permissions.empty) { -%>

<%= permissions.empty %>

<% } else { -%>
<%= permissions.legend %> <% permissions.choices.forEach((c, i) => { -%>
>
<% }) -%>
<% } -%>