<%# Admin permission detail body, captured into the shell content slot. Config: permission { name } members { action, rows: { kind:"group"|"identity", label, subject }[] } action = revoke endpoint effective { label }[] users who hold the permission (expand) add { action, options: {label,value}[] } action = assign endpoint del { action } delete the whole permission csrfToken, error? %><% const permission = locals.permission; const members = locals.members; const effective = locals.effective; const add = locals.add; const del = locals.del; const csrf = locals.csrfToken; -%>
<% if (locals.error) { -%> <%- include("partials/alert", { text: locals.error, tone: "neg" }) %> <% } -%>

Assigned to

<% if (members.rows.length) { -%>
<% members.rows.forEach((m) => { -%> <% }) -%>
Members of <%= permission.name %>
MemberTypeActions
<%= m.label %><%= m.kind === "group" ? "Group" : "User" %>
<% } else { -%>

Not assigned to anyone yet.

<% } -%>

Effective access

Everyone who holds this permission — directly or through a group (resolved by Keto).

<% if (effective.length) { -%> <% } else { -%>

No users hold this permission yet.

<% } -%>

Assign the permission

<% if (add.options.length) { -%>
<% } else { -%>

All users and groups already have this permission.

<% } -%>
Delete permission