{# Rights: the service rights and the grants, one line each to read, and
   their editor inside a form (see grants.py).
   Roles: as tags, and as checkboxes to give. #}
{% from "components/ui.html" import icon, toggle %}

{% macro grants_of(grants, names) %}{% for grant in grants %}{{ grant_summary(grant, names) }}{% else %}—{% endfor %}{% endmacro %}

{% macro service_of(service) %}{% for right in service %}<span class="tag accent">{{ right }}</span> {% else %}—{% endfor %}{% endmacro %}

{% macro rights_of(service, grants, names) %}{% if service %}<div class="grant"><span class="muted">of the service</span> {{ service_of(service) }}</div>{% endif %}{% if grants or not service %}{{ grants_of(grants, names) }}{% endif %}{% endmacro %}

{% macro sending_of(sending) %}{% for limit in sending %}
<div>{% if limit.recipients is none %}to anyone{% else %}to {{ limit.recipients | join(", ") }}{% endif %}, {% if limit.max_sends_per_day is none %}no daily limit{% else %}at most {{ limit.max_sends_per_day }} a day, {{ limit.sends_left }} left now{% endif %}</div>
{% else %}<span class="muted">—</span>{% endfor %}{% endmacro %}

{% macro role_tags(roles) %}{% for role in roles %}<a class="tag" href="/ui/roles/{{ role | segment }}">{{ role }}</a> {% else %}—{% endfor %}{% endmacro %}

{% macro role_checks(choices, held) %}
<div class="field">
  <span class="label">Roles</span>
  <div class="checks">
    {% for role in choices %}<label class="check"><input type="checkbox" name="roles" value="{{ role }}"{% if role in held %} checked{% endif %} /> {{ role }}</label>{% endfor %}
  </div>
</div>
{% endmacro %}

{% macro grant_summary(grant, names) %}
<div class="grant">
  <span class="muted">on</span>
  {% for account in grant.accounts %}<span class="tag">{{ "every account" if account == "*" else names.get(account, account) }}</span> {% endfor %}
  <span class="muted">may</span>
  {% for right in grant.allow %}<span class="tag accent">{{ right }}</span> {% endfor %}
  {% if grant.folders is not none %}<span class="muted">in the folders</span> {{ grant.folders | join(", ") }}{% endif %}
  {% if grant.recipients is not none %}<span class="muted">sending to</span> {{ grant.recipients | join(", ") }}{% endif %}
  {% if grant.max_sends_per_day is not none %}<span class="muted">at most</span> {{ grant.max_sends_per_day }} <span class="muted">mails a day</span>{% endif %}
  {% if grant.expires_at is not none %}{% if grant.expires_at | past %}<span class="tag bad">expired</span> <span class="muted">on</span> {{ grant.expires_at | when }}{% else %}<span class="muted">until</span> {{ grant.expires_at | when }}{% endif %}{% endif %}
</div>
{% endmacro %}

{% macro service_editor(service, service_names, service_ops) %}
<div class="field">
  <span class="label">Rights of the service</span>
  <div class="checks">
    {% for name in service_names %}
    <label class="check" title="{{ service_ops[name] }}"><input type="checkbox" name="service" value="{{ name }}"{% if name in service.groups %} checked{% endif %} /> {{ name }}</label>
    {% endfor %}
  </div>
  <span class="hint">Bound to no account: connecting accounts, users and roles, webhooks, the audit of administration. admin is every right.</span>
</div>
<div class="form-grid">
  <div class="field">
    <label for="f-service_more">Single rights</label>
    <input id="f-service_more" name="service_more" value="{{ service.more }}" placeholder="e.g. list_webhooks" />
    <span class="hint">Operation names of the service, beyond the groups.</span>
  </div>
</div>
{% endmacro %}

{# The grants of a user or a role in their editor (docs/UI.md 6.3): one
   line each as it reads, the pencil unfolds its fields, the bin marks it
   removed (struck through, a hidden tick box), the plus at the top
   unfolds an empty one. Nothing is stored before the form's Save.
   ``open``: every grant unfolded, e.g. when the form came back refused. #}
{% macro grant_editor(rows, account_choices, groups, group_ops, open=False) %}
{% set names = dict(account_choices) %}
{% set existing = rows | length - 1 %}
<input type="hidden" name="grants" value="{{ rows | length }}" />
<div class="grant-lines">
  <div class="grant-tools">{{ toggle("grant-new", "Add a grant", "plus-lg", alone=False, open=open or not existing) }}</div>
  {% for row in rows %}
  {% set i = loop.index0 %}
  {% if loop.last %}
  <div class="row-form{{ ' open' if open or not existing }}" id="grant-new">
    <fieldset class="grant-row">
      <legend>A new grant</legend>
{{ _grant_fields(row, i, account_choices, groups, group_ops) }}
    </fieldset>
  </div>
  {% else %}
  <div class="grant-line">
    <div class="grant-head">
      {{ row_summary(row, names) }}
      <span class="grant-actions">
        {{ toggle("grant-" ~ i, "Change", "pencil", name="Change grant " ~ loop.index, open=open) }}
        <label class="small icon-btn danger" title="Remove"><input class="sr" type="checkbox" name="g{{ i }}_remove" value="1" aria-label="Remove grant {{ loop.index }}" />{{ icon("trash") }}</label>
      </span>
    </div>
    <div class="row-form{{ ' open' if open }}" id="grant-{{ i }}">
      <fieldset class="grant-row">
        <legend>Grant {{ loop.index }}</legend>
{{ _grant_fields(row, i, account_choices, groups, group_ops) }}
      </fieldset>
    </div>
  </div>
  {% endif %}
  {% endfor %}
</div>
{% endmacro %}

{# A grant as the editor holds it, in one line, as grant_summary reads a
   stored one. #}
{% macro row_summary(row, names) %}
<div class="grant">
  <span class="muted">on</span>
  {% for account in row.accounts %}<span class="tag">{{ "every account" if account == "*" else names.get(account, account) }}</span> {% else %}<span class="muted">no account</span>{% endfor %}
  <span class="muted">may</span>
  {% for right in row.groups %}<span class="tag accent">{{ right }}</span> {% endfor %}{% for right in row.more.split() %}<span class="tag mono">{{ right }}</span> {% endfor %}
  {% if row.folders %}<span class="muted">in the folders</span> {{ row.folders.splitlines() | join(", ") }}{% endif %}
  {% if row.recipients %}<span class="muted">sending to</span> {{ row.recipients.split() | join(", ") }}{% endif %}
  {% if row.max_per_day %}<span class="muted">at most</span> {{ row.max_per_day }} <span class="muted">mails a day</span>{% endif %}
  {% if row.expires %}<span class="muted">until</span> {{ row.expires | replace("T", " ") }}{% endif %}
</div>
{% endmacro %}

{% macro _grant_fields(row, i, account_choices, groups, group_ops) %}
  <div class="field">
    <span class="label">Accounts</span>
    <div class="checks">
      <label class="check"><input type="checkbox" name="g{{ i }}_accounts" value="*"{% if "*" in row.accounts %} checked{% endif %} /> every account, also later ones</label>
      {% for id, email in account_choices %}
      <label class="check"><input type="checkbox" name="g{{ i }}_accounts" value="{{ id }}"{% if id in row.accounts %} checked{% endif %} /> {{ email }}</label>
      {% endfor %}
    </div>
  </div>
  <div class="field">
    <span class="label">Rights</span>
    {% for caption, names in groups %}
    <span class="hint">{{ caption }}</span>
    <div class="checks">
      {% for group in names %}
      <label class="check" title="{{ group_ops[group] }}"><input type="checkbox" name="g{{ i }}_allow" value="{{ group }}"{% if group in row.groups %} checked{% endif %} /> {{ group }}</label>
      {% endfor %}
    </div>
    {% endfor %}
  </div>
  <div class="form-grid">
    <div class="field">
      <label for="f-g{{ i }}_more">Single rights</label>
      <input id="f-g{{ i }}_more" name="g{{ i }}_more" value="{{ row.more }}" placeholder="e.g. get_message list_folders" />
      <span class="hint">Operation names, beyond the groups.</span>
    </div>
    <div class="field">
      <label for="f-g{{ i }}_max">Sends per day</label>
      <input id="f-g{{ i }}_max" name="g{{ i }}_max" inputmode="numeric" value="{{ row.max_per_day }}" />
      <span class="hint">From one account, in any 24 hours. Empty: no limit.</span>
    </div>
    <div class="field">
      <label for="f-g{{ i }}_folders">Only in the folders</label>
      <textarea id="f-g{{ i }}_folders" name="g{{ i }}_folders" rows="2" placeholder="inbox, Invoices">{{ row.folders }}</textarea>
      <span class="hint">One per line: a role such as inbox, or a name. Subfolders count. Empty: every folder.</span>
    </div>
    <div class="field">
      <label for="f-g{{ i }}_expires">Valid until</label>
      <input id="f-g{{ i }}_expires" name="g{{ i }}_expires" type="datetime-local" value="{{ row.expires }}" />
      <span class="hint">In the service's time zone. Empty: no end. Expired, the grant grants nothing.</span>
    </div>
    <div class="field wide">
      <label for="f-g{{ i }}_recipients">Send only to</label>
      <textarea id="f-g{{ i }}_recipients" name="g{{ i }}_recipients" rows="2" placeholder="name@example.org, *@example.org or *">{{ row.recipients }}</textarea>
      <span class="hint">One per line. Empty: to anyone.</span>
    </div>
  </div>
{% endmacro %}