{{define "user_detail"}}{{template "layout" .}}{{end}}
{{define "content"}}
<header class="page-heading">
  <div>
    <a class="back-link" href="/users">← Benutzer</a>
    <span class="page-kicker">Benutzerprofil</span>
    <h1>{{.ManagedUser.DisplayName}}</h1>
    <p>@{{.ManagedUser.Username}} · {{if eq .ManagedUser.Role "admin"}}Admin mit vollständigem Zugriff{{else}}Mitglied mit gezielten Freigaben{{end}}</p>
  </div>
  <span class="status-pill {{if .ManagedUser.Active}}status-good{{else}}status-bad{{end}}">{{if .ManagedUser.Active}}aktiv{{else}}deaktiviert{{end}}</span>
</header>

<section class="split-grid">
  <article class="panel">
    <div class="panel-heading"><div><span class="section-label">Konto</span><h2>Rolle und Status</h2></div></div>
    <form action="/users/{{.ManagedUser.ID}}/state" method="post" class="stacked-form">
      <input type="hidden" name="csrf" value="{{.CSRF}}">
      <label>Anzeigename <input name="display_name" value="{{.ManagedUser.DisplayName}}" maxlength="80" required></label>
      <label>Rolle <select name="role"><option value="member" {{if eq .ManagedUser.Role "member"}}selected{{end}}>Mitglied</option><option value="admin" {{if eq .ManagedUser.Role "admin"}}selected{{end}}>Admin</option></select></label>
      <label class="switch"><input type="checkbox" name="active" {{if .ManagedUser.Active}}checked{{end}}><span></span> Konto aktiv</label>
      <button class="button button-primary" type="submit">Kontostatus speichern</button>
    </form>
  </article>
  <article class="panel">
    <div class="panel-heading"><div><span class="section-label">Anmeldedaten</span><h2>Passwort zurücksetzen</h2></div></div>
    <form action="/users/{{.ManagedUser.ID}}/password" method="post" class="stacked-form">
      <input type="hidden" name="csrf" value="{{.CSRF}}">
      <label>Neues Passwort <input name="password" type="password" minlength="12" autocomplete="new-password" required></label>
      <label>Passwort wiederholen <input name="confirm_password" type="password" minlength="12" autocomplete="new-password" required></label>
      <button class="button button-danger" type="submit">Passwort zurücksetzen</button>
      <small>Alle Sitzungen dieses Benutzers werden dabei beendet.</small>
    </form>
  </article>
</section>

{{if eq .ManagedUser.Role "member"}}
<section class="panel access-panel">
  <div class="panel-heading"><div><span class="section-label">Berechtigungen</span><h2>Domain- und Subdomain-Zugriffe</h2></div></div>
  <p class="access-intro">Lege getrennt fest, was sichtbar ist, was bearbeitet werden darf und in welchen Domains das Mitglied selbst neue Subdomains anlegen kann.</p>
  <form action="/users/{{.ManagedUser.ID}}/access" method="post">
    <input type="hidden" name="csrf" value="{{.CSRF}}">
    <div class="access-list">
      {{range .AccessZones}}
      {{$accessZone := .}}
      <article class="access-zone" data-access-zone>
        <div class="access-zone-head">
          <div><h3>{{$accessZone.Zone.Name}}</h3><small>{{len $accessZone.Targets}} bekannte DynDNS-Ziele</small></div>
          <div class="access-zone-controls">
            <label class="switch"><input type="checkbox" name="zone_{{$accessZone.Zone.ID}}" data-zone-access {{if $accessZone.DomainGranted}}checked{{end}}><span></span> Ganze Domain sehen</label>
            <label class="switch"><input type="checkbox" name="manage_zone_{{$accessZone.Zone.ID}}" data-zone-manage {{if $accessZone.DomainManaged}}checked{{end}}><span></span> Alle Ziele bearbeiten</label>
            <label class="switch"><input type="checkbox" name="create_zone_{{$accessZone.Zone.ID}}" data-zone-create {{if $accessZone.CanCreateTargets}}checked{{end}}><span></span> Subdomains anlegen</label>
          </div>
        </div>
        {{if $accessZone.Targets}}
        <div class="access-targets">
          {{range $accessZone.Targets}}
          <div class="access-target" data-access-target>
            <label class="access-target-main"><input type="checkbox" name="target_{{.ID}}" data-target-access {{if index $accessZone.GrantedTargetIDs .ID}}checked{{end}}><span><strong>{{.FQDN}}</strong><small>{{families .}} · {{if .Active}}aktiv{{else}}inaktiv{{end}}</small></span></label>
            <label class="switch access-manage-switch"><input type="checkbox" name="manage_target_{{.ID}}" data-target-manage {{if index $accessZone.ManagedTargetIDs .ID}}checked{{end}}><span></span> Bearbeiten</label>
          </div>
          {{end}}
        </div>
        {{else}}<p class="muted-cell">Keine A-/AAAA-Records importiert.</p>{{end}}
      </article>
      {{end}}
    </div>
    <div class="form-actions"><button class="button button-primary" type="submit">Zugriffsrechte speichern</button></div>
  </form>
</section>
{{else}}
<section class="panel access-panel"><div class="warning-box">Dieser Benutzer ist Admin und hat deshalb automatisch vollen Zugriff auf alle Domains, Hosts, Tokens und Einstellungen.</div></section>
{{end}}
{{end}}