{% extends "baseTemplate/index.html" %}

{% comment %}
==============================================================================
CloudPanel — permission denied
------------------------------------------------------------------------------
Rendered whenever an ACL check fails inside a view.  Views may pass:

  deniedAction   str  human description of what was attempted
  requiredACL    str  the ACL key that would have been needed
  ownerHint      str  who to ask (defaults to the panel admin address)

The sidebar is still rendered so the operator can navigate somewhere they are
allowed to be.
==============================================================================
{% endcomment %}

{% block title %}Permission Denied{% endblock %}

{% block content %}

<div class="cp-page-head">
    <div>
        <h1 class="cp-page-head__title">
            <i class="fa-solid fa-ban" style="color:var(--cp-danger)" aria-hidden="true"></i>
            Permission Denied
        </h1>
        <p class="cp-page-head__sub">Your account is not allowed to perform this action.</p>
    </div>
    <div class="cp-page-head__actions">
        <a href="/" class="cp-btn cp-btn--primary">
            <i class="fa-solid fa-gauge-high" aria-hidden="true"></i> Back to Dashboard
        </a>
    </div>
</div>

<div class="cp-card">
    <div class="cp-card__body">

        <div class="cp-alert cp-alert--danger">
            <i class="fa-solid fa-shield-halved" aria-hidden="true"></i>
            <p>
                {% if deniedAction %}
                    The action <strong>{{ deniedAction }}</strong> is not available to your
                    account on this panel.
                {% else %}
                    This area of {{ CLOUDPANEL.PANEL_NAME|default:"CloudPanel" }} is restricted.
                {% endif %}
            </p>
        </div>

        <p class="cp-muted">
            CloudPanel enforces access control on the server, not in the browser — this
            page means the server rejected the request, so retrying or editing the URL
            will not change the outcome.
        </p>

        <div class="cp-table-wrap">
            <table class="cp-table cp-table--compact">
                <tbody>
                    <tr>
                        <td class="cp-muted" style="width:220px">Signed in as</td>
                        <td class="cp-mono">{{ currentUserName|default:"unknown" }}</td>
                    </tr>
                    {% if requiredACL %}
                    <tr>
                        <td class="cp-muted">Required permission</td>
                        <td><code>{{ requiredACL }}</code></td>
                    </tr>
                    {% endif %}
                    <tr>
                        <td class="cp-muted">Requested path</td>
                        <td class="cp-mono cp-truncate">{{ request.path }}</td>
                    </tr>
                    <tr>
                        <td class="cp-muted">Who can grant this</td>
                        <td>
                            {{ ownerHint|default:CLOUDPANEL.ADMIN_EMAIL|default:"admin@a1hosting.net" }}
                        </td>
                    </tr>
                </tbody>
            </table>
        </div>

    </div>
    <div class="cp-card__foot">
        <a href="mailto:{{ CLOUDPANEL.SUPPORT_EMAIL|default:'support@a1hosting.net' }}?subject=Access%20request%20for%20{{ request.path|urlencode }}"
           class="cp-btn cp-btn--ghost">
            <i class="fa-regular fa-envelope" aria-hidden="true"></i> Request Access
        </a>
        <a href="/" class="cp-btn cp-btn--primary">
            <i class="fa-solid fa-arrow-left" aria-hidden="true"></i> Return to Dashboard
        </a>
    </div>
</div>

{% endblock %}