{# Rights: the service rights and the grants, one line each to read, and
   their editor inside a form (see grants.py).
   Roles: as tags, and as checkboxes to give. #}

{% macro grants_of(grants, names) %}{% for grant in grants %}{{ grant_summary(grant, names) }}{% else %}—{% endfor %}{% endmacro %}

{% macro service_of(service) %}{% for right in service %}<span class="tag accent">{{ right }}</span> {% else %}—{% endfor %}{% endmacro %}

{% macro rights_of(service, grants, names) %}{% if service %}<div class="grant"><span class="muted">of the service</span> {{ service_of(service) }}</div>{% endif %}{% if grants or not service %}{{ grants_of(grants, names) }}{% endif %}{% endmacro %}

{% macro sending_of(sending) %}{% for limit in sending %}
<div>{% if limit.recipients is none %}to anyone{% else %}to {{ limit.recipients | join(", ") }}{% endif %}, {% if limit.max_sends_per_day is none %}no daily limit{% else %}at most {{ limit.max_sends_per_day }} a day, {{ limit.sends_left }} left now{% endif %}</div>
{% else %}<span class="muted">—</span>{% endfor %}{% endmacro %}

{% macro role_tags(roles) %}{% for role in roles %}<a class="tag" href="/ui/roles/{{ role | segment }}">{{ role }}</a> {% else %}—{% endfor %}{% endmacro %}

{% macro role_checks(choices, held) %}
<div class="field">
  <span class="label">Roles</span>
  <div class="checks">
    {% for role in choices %}<label class="check"><input type="checkbox" name="roles" value="{{ role }}"{% if role in held %} checked{% endif %} /> {{ role }}</label>{% endfor %}
  </div>
</div>
{% endmacro %}

{% macro grant_summary(grant, names) %}
<div class="grant">
  <span class="muted">on</span>
  {% for account in grant.accounts %}<span class="tag">{{ "every account" if account == "*" else names.get(account, account) }}</span> {% endfor %}
  <span class="muted">may</span>
  {% for right in grant.allow %}<span class="tag accent">{{ right }}</span> {% endfor %}
  {% if grant.folders is not none %}<span class="muted">in the folders</span> {{ grant.folders | join(", ") }}{% endif %}
  {% if grant.recipients is not none %}<span class="muted">sending to</span> {{ grant.recipients | join(", ") }}{% endif %}
  {% if grant.max_sends_per_day is not none %}<span class="muted">at most</span> {{ grant.max_sends_per_day }} <span class="muted">mails a day</span>{% endif %}
  {% if grant.expires_at is not none %}{% if grant.expires_at | past %}<span class="tag bad">expired</span> <span class="muted">on</span> {{ grant.expires_at | when }}{% else %}<span class="muted">until</span> {{ grant.expires_at | when }}{% endif %}{% endif %}
</div>
{% endmacro %}

{% macro service_editor(service, service_names, service_ops) %}
<div class="field">
  <span class="label">Rights of the service</span>
  <div class="checks">
    {% for name in service_names %}
    <label class="check" title="{{ service_ops[name] }}"><input type="checkbox" name="service" value="{{ name }}"{% if name in service.groups %} checked{% endif %} /> {{ name }}</label>
    {% endfor %}
  </div>
  <span class="hint">Bound to no account: connecting accounts, users and roles, webhooks, the audit of administration. admin is every right.</span>
</div>
<div class="form-grid">
  <div class="field">
    <label for="f-service_more">Single rights</label>
    <input id="f-service_more" name="service_more" value="{{ service.more }}" placeholder="e.g. list_webhooks" />
    <span class="hint">Operation names of the service, beyond the groups.</span>
  </div>
</div>
{% endmacro %}

{% macro grant_editor(rows, account_choices, groups, group_ops) %}
<input type="hidden" name="grants" value="{{ rows | length }}" />
{% for row in rows %}
{% set i = loop.index0 %}
{% set adding = loop.last %}
<fieldset class="grant-row">
  <legend>{{ "Add a grant" if adding else "Grant " ~ loop.index }}</legend>
  <div class="field">
    <span class="label">Accounts</span>
    <div class="checks">
      <label class="check"><input type="checkbox" name="g{{ i }}_accounts" value="*"{% if "*" in row.accounts %} checked{% endif %} /> every account, also later ones</label>
      {% for id, email in account_choices %}
      <label class="check"><input type="checkbox" name="g{{ i }}_accounts" value="{{ id }}"{% if id in row.accounts %} checked{% endif %} /> {{ email }}</label>
      {% endfor %}
    </div>
  </div>
  <div class="field">
    <span class="label">Rights</span>
    {% for caption, names in groups %}
    <span class="hint">{{ caption }}</span>
    <div class="checks">
      {% for group in names %}
      <label class="check" title="{{ group_ops[group] }}"><input type="checkbox" name="g{{ i }}_allow" value="{{ group }}"{% if group in row.groups %} checked{% endif %} /> {{ group }}</label>
      {% endfor %}
    </div>
    {% endfor %}
  </div>
  <div class="form-grid">
    <div class="field">
      <label for="f-g{{ i }}_more">Single rights</label>
      <input id="f-g{{ i }}_more" name="g{{ i }}_more" value="{{ row.more }}" placeholder="e.g. get_message list_folders" />
      <span class="hint">Operation names, beyond the groups.</span>
    </div>
    <div class="field">
      <label for="f-g{{ i }}_max">Sends per day</label>
      <input id="f-g{{ i }}_max" name="g{{ i }}_max" inputmode="numeric" value="{{ row.max_per_day }}" />
      <span class="hint">From one account, in any 24 hours. Empty: no limit.</span>
    </div>
    <div class="field">
      <label for="f-g{{ i }}_folders">Only in the folders</label>
      <textarea id="f-g{{ i }}_folders" name="g{{ i }}_folders" rows="2" placeholder="inbox, Invoices">{{ row.folders }}</textarea>
      <span class="hint">One per line: a role such as inbox, or a name. Subfolders count. Empty: every folder.</span>
    </div>
    <div class="field">
      <label for="f-g{{ i }}_expires">Valid until</label>
      <input id="f-g{{ i }}_expires" name="g{{ i }}_expires" type="datetime-local" value="{{ row.expires }}" />
      <span class="hint">In the service's time zone. Empty: no end. Expired, the grant grants nothing.</span>
    </div>
    <div class="field wide">
      <label for="f-g{{ i }}_recipients">Send only to</label>
      <textarea id="f-g{{ i }}_recipients" name="g{{ i }}_recipients" rows="2" placeholder="name@example.org, *@example.org or *">{{ row.recipients }}</textarea>
      <span class="hint">One per line. Empty: to anyone.</span>
    </div>
  </div>
  {% if not adding %}<label class="check"><input type="checkbox" name="g{{ i }}_remove" value="1" /> remove this grant</label>{% endif %}
</fieldset>
{% endfor %}
{% endmacro %}