{% extends "config/base.html" %}
{% import "site_shell/_macros.html" as ui %}

{% block title %}{{ role.name }} - Pychestrate Configuration{% endblock %}

{% block content %}
<div class="page-header">
    <h1>Role: {{ role.name }}</h1>
    <p>View role details and permissions</p>
</div>

<div class="card narrow">
    <table class="btn-block">
        <tr>
            <th scope="row">Name</th>
            <td>{{ role.name }}</td>
        </tr>
        <tr>
            <th scope="row">Description</th>
            <td>{{ role.description or '—' }}</td>
        </tr>
        <tr>
            <th scope="row">Type</th>
            <td>
                {% if role.is_system %}
                <span class="badge badge-info">Built-in Role</span>
                {% else %}
                <span class="badge badge-success">Custom Role</span>
                {% endif %}
            </td>
        </tr>
        <tr>
            <th scope="row">Assigned</th>
            <td>{{ role.binding_count }} user{{ '' if role.binding_count == 1 else 's' }}</td>
        </tr>
        <tr>
            <th scope="row">Created</th>
            <td>{{ role.created_at | format_datetime('%Y-%m-%d %H:%M:%S', 'Unknown') }}</td>
        </tr>
    </table>
</div>

<div class="card mt" data-role="role-holders">
    <h2 class="card-header">Who has this role ({{ role.binding_count }})</h2>
    {% if not may_see_holders %}
    <p class="muted">Naming the people who have a role needs permission to view users.</p>
    {% elif role_holders %}
    <div class="table-scroll" tabindex="0"><table class="data-table">
        <thead>
            <tr>
                <th scope="col">Name</th>
                <th scope="col">Username</th>
                <th scope="col">Applies to</th>
            </tr>
        </thead>
        <tbody>
            {% for holder in role_holders %}
            <tr>
                <td>
                    {% if holder.kind == 'user' and holder.login_name %}
                    <a href="{{ url_for('config.user_detail', user_id=holder.principal_id) }}">{{ holder.label }}</a>
                    {% else %}
                    {{ holder.label }}
                    {% endif %}
                    {% if not holder.is_active %}<span class="badge badge-warning">Deactivated</span>{% endif %}
                </td>
                <td>{{ holder.login_name or '—' }}</td>
                <td>{{ holder.scope_label }}</td>
            </tr>
            {% endfor %}
        </tbody>
    </table></div>
    {% if role.binding_count > role_holders | length %}
    <p class="muted">Showing the first {{ role_holders | length }} of {{ role.binding_count }}.</p>
    {% endif %}
    {% else %}
    <p class="muted">Nobody has this role yet. Give it to a person from their user page.</p>
    {% endif %}
</div>

<div class="card mt">
    <h2 class="card-header">Permissions ({{ role.permissions | length }})</h2>
    {% if role.permissions %}
    {% for group in role.permissions | permission_groups %}
    <h3 class="pyc-permissions__area">{{ group.label }}</h3>
    <ul class="list-tight">
        {% for item in group["items"] %}
        <li class="py-sm" title="{{ item.permission.name }}">
            {{ item.label }}
            {% if item.description %}<span class="muted"> - {{ item.description }}</span>{% endif %}
        </li>
        {% endfor %}
    </ul>
    {% endfor %}
    {% else %}
    <p class="muted">No permissions assigned</p>
    {% endif %}
</div>

<div class="actions-row mt">
    {% if may_change_roles %}
    {% if not role.is_system %}
    <a href="{{ url_for('config.role_edit', role_id=role.id) }}" class="btn btn-primary">
        {{ ui.icon("edit") }} Edit Role
    </a>
    {% endif %}
    <a href="{{ url_for('config.role_create') }}?copy_from={{ role.id }}" class="btn {{ 'btn-primary' if role.is_system else 'btn-secondary' }}" data-role="copy-role">
        {{ ui.icon("add") }} Copy Role
    </a>
    {% if not role.is_system %}
    <form action="{{ url_for('config.role_delete', role_id=role.id) }}" method="post">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <button type="submit" class="btn btn-danger" data-confirm-type="{{ role.name }}" data-confirm="Delete role {{ role.name }}? {{ role.binding_count }} user{{ '' if role.binding_count == 1 else 's' }} will lose this role.">
            {{ ui.icon("delete") }} Delete Role
        </button>
    </form>
    {% endif %}
    {% endif %}
    {% if role.is_system %}
    <p class="muted small" style="align-self: center; margin: 0;">
        Built-in role: its permissions are defined by the system and
        cannot be edited or deleted. Copy it to make a version you can change.
    </p>
    {% endif %}
    <a href="{{ url_for('config.role_list') }}" class="btn btn-secondary">Back to List</a>
</div>
{% endblock %}