78 lines
3.9 KiB
Plaintext
78 lines
3.9 KiB
Plaintext
<%#
|
|
The permission picker, shared by the user-edit and group-detail pages. A fieldset of checkboxes —
|
|
one per permission the installed plugins declare — ticked where this user/group holds it. The whole
|
|
set posts back, so what is submitted IS the desired set of *direct* grants (see admin-grants.ts).
|
|
|
|
Two rows never post, by design: an `inherited` one (the grant comes from a group, so it is changed
|
|
there) and every row when `readOnly` (the viewer holds :read but not :write). Neither can be diffed
|
|
into an accidental revoke, because grantDiff compares against the direct grants only.
|
|
|
|
Locals: csrfToken, permissions ({ action, baseline, choices, empty, error, field, hint, inheritedNote, legend, notice, pending, readOnly, submit, undeclared }).
|
|
|
|
`undeclared` lists direct grants of names no plugin declares, outside the form above because grantDiff
|
|
never revokes one. Each has its own Remove form, and a reader gets the names without the button.
|
|
%>
|
|
<section class="form-card" aria-labelledby="permissions-h">
|
|
<h2 class="card-title" id="permissions-h"><%= permissions.legend %></h2>
|
|
<% if (permissions.error) { -%>
|
|
<%- include("partials/alert", { text: permissions.error, tone: "neg" }) %>
|
|
<% } -%>
|
|
<% if (permissions.notice) { -%>
|
|
<%- include("partials/alert", { text: permissions.notice, tone: "pos" }) %>
|
|
<% } -%>
|
|
<% if (permissions.empty) { -%>
|
|
<p class="cell-muted"><%= permissions.empty %></p>
|
|
<% } else { -%>
|
|
<p class="cell-muted"><%= permissions.hint %></p>
|
|
<% if (permissions.readOnly) { -%>
|
|
<fieldset class="check-group">
|
|
<legend class="sr-only"><%= permissions.legend %></legend>
|
|
<% permissions.choices.forEach((c) => { -%>
|
|
<label class="check"><input type="checkbox"<%= c.checked ? " checked" : "" %> disabled><span><%= c.description || c.name %></span><span class="cell-muted"><%= c.name %></span></label>
|
|
<% }) -%>
|
|
</fieldset>
|
|
<% } else { -%>
|
|
<%# The fragment brings the card, and the notice in it, into view on a long page. %>
|
|
<form method="post" action="<%= localeHref(permissions.action + '#permissions-h') %>">
|
|
<input type="hidden" name="_csrf" value="<%= csrfToken %>">
|
|
<input type="hidden" name="baseline" value="<%= permissions.baseline %>">
|
|
<fieldset class="check-group">
|
|
<legend class="sr-only"><%= permissions.legend %></legend>
|
|
<% permissions.choices.forEach((c) => { -%>
|
|
<label class="check"><input type="checkbox" name="<%= permissions.field %>" value="<%= c.name %>"<%= c.checked ? " checked" : "" %><%= c.inherited ? " disabled" : "" %>><span><%= c.description || c.name %></span><span class="cell-muted"><%= c.name %></span></label>
|
|
<% }) -%>
|
|
</fieldset>
|
|
<div class="form-actions">
|
|
<button class="btn btn-primary" type="submit"><svg class="ico ico-sm" aria-hidden="true"><use href="#i-check-circle"/></svg><%= permissions.submit %></button>
|
|
</div>
|
|
</form>
|
|
<% } -%>
|
|
<% if (permissions.inheritedNote) { -%>
|
|
<p class="cell-muted"><%= permissions.inheritedNote %></p>
|
|
<% } -%>
|
|
<% if (permissions.pending) { -%>
|
|
<p class="cell-muted"><%= permissions.pending %></p>
|
|
<% } -%>
|
|
<% } -%>
|
|
<% if (permissions.undeclared) { const u = permissions.undeclared; -%>
|
|
<h3 class="card-title" id="undeclared-h"><%= u.legend %></h3>
|
|
<p class="cell-muted"><%= u.hint %></p>
|
|
<ul class="plain-list" aria-labelledby="undeclared-h">
|
|
<% u.names.forEach((name) => { -%>
|
|
<li>
|
|
<% if (u.remove) { -%>
|
|
<form method="post" action="<%= localeHref(u.action + '#permissions-h') %>">
|
|
<input type="hidden" name="_csrf" value="<%= csrfToken %>">
|
|
<input type="hidden" name="<%= u.field %>" value="<%= name %>">
|
|
<span class="cell-muted"><%= name %></span>
|
|
<button class="btn btn-danger" type="submit"><%= u.remove %><span class="sr-only"> <%= name %></span></button>
|
|
</form>
|
|
<% } else { -%>
|
|
<span class="cell-muted"><%= name %></span>
|
|
<% } -%>
|
|
</li>
|
|
<% }) -%>
|
|
</ul>
|
|
<% } -%>
|
|
</section>
|