{% extends "base.html" %}
{% from "components/ui.html" import breadcrumb, card, csrf_field, danger_card, fact, facts, icon with context %}
{% from "components/grants.html" import grant_editor, grants_of, service_editor, service_of %}
{% block title %}{{ role.id }} · {{ APP_NAME }}{% endblock %}
{% block heading %}Role {{ role.id }}{% endblock %}
{% block subheading %}{{ breadcrumb([("Roles", "/ui/roles"), (role.id, None)]) }}{% endblock %}
{% block content %}
{% call facts("Role") %}
  {% call fact("Service rights") %}{{ service_of(role.service) }}{% endcall %}
  {% call fact("Grants") %}{{ grants_of(role.grants, names) }}{% endcall %}
  {% if holders is not none %}
  {% call fact("Users") %}{% for user in holders %}<a class="tag" href="/ui/users/{{ user.id }}">{{ user.name }}</a> {% else %}—{% endfor %}{% endcall %}
  {% endif %}
{% endcall %}

{% if can_update %}
<form method="post" action="/ui/roles/{{ role.id | segment }}">
  {{ csrf_field() }}
  {% call card("Change", meta="Takes effect at once for every user with this role.") %}
    <details class="fold"{% if err %} open{% endif %}>
      <summary>Service rights</summary>
      {{ service_editor(service, service_names, service_ops) }}
    </details>
    <details class="fold"{% if err %} open{% endif %}>
      <summary>Grants</summary>
      {{ grant_editor(rows, account_choices, groups, group_ops, open=err) }}
    </details>
    <div class="form-actions"><button class="primary" type="submit">{{ icon("check-lg") }} Save</button></div>
  {% endcall %}
</form>
{% endif %}

{% if can_delete %}
{{ danger_card("Delete", "Only a role no user holds can be deleted.", "/ui/roles/" ~ (role.id | segment) ~ "/delete", "Delete role", "Delete the role " ~ role.id ~ "?") }}
{% endif %}
{% endblock %}