{% extends "baseTemplate/index.html" %}
{% load static %}
{% comment %} Creating an ACL is exactly as constrained as granting one: every checkbox
   ticked here must be a permission the signed-in account already holds, enforced
   in userManagement.views.submitACLCreation via ACLManager.aclGrantable. {% endcomment %}

{% block title %}New ACL{% endblock %}

{% block content %}
<div ng-controller="createACLController">

  <div class="d-flex flex-wrap align-items-center justify-content-between gap-2 mb-4">
    <div>
      <h1 class="h4 mb-1">New ACL</h1>
      <p class="text-muted mb-0 small">
        You can only tick permissions your own account already holds.
      </p>
    </div>
    <a href="/users/listACLs" class="btn btn-outline-secondary">
      <i class="fas fa-shield-halved me-1"></i>All ACLs
    </a>
  </div>

  <div class="alert alert-danger py-2 px-3" ng-show="errorMessage" ng-cloak role="alert">
    <i class="fas fa-triangle-exclamation me-1"></i>
    <span ng-bind="errorMessage"></span>
  </div>

  <form novalidate ng-submit="submit()">
    <div class="card mb-4">
      <div class="card-body">
        <label class="form-label" for="caName">ACL name</label>
        <input type="text" class="form-control" id="caName" maxlength="50" style="max-width:320px"
               ng-model="acl.name" placeholder="e.g. supportStaff" required>
        <div class="form-text">
          Letters, digits, underscore and hyphen only.
        </div>
      </div>
    </div>

    <div class="card mb-4">
      <div class="card-body">
        <h2 class="h6 mb-3">Permissions</h2>
        {% for label, fields in groups %}
        <div class="mb-3">
          <h3 class="h6 text-muted small text-uppercase mb-2">{{ label }}</h3>
          <div class="row row-cols-2 row-cols-md-3 g-2">
            {% for field in fields %}
            <div class="col">
              <div class="form-check">
                <input class="form-check-input" type="checkbox" id="ca_{{ field }}"
                       ng-model="acl.flags['{{ field }}']">
                <label class="form-check-label small" for="ca_{{ field }}">{{ field }}</label>
              </div>
            </div>
            {% endfor %}
          </div>
        </div>
        {% endfor %}
      </div>
    </div>

    <button type="submit" class="btn btn-primary" ng-disabled="busy">
      <span ng-show="busy" class="spinner-border spinner-border-sm me-1" role="status" aria-hidden="true"></span>
      <span ng-bind="busy ? 'Creating…' : 'Create ACL'"></span>
    </button>
  </form>
</div>
{% endblock %}

{% block scripts %}
<script src="{% static 'userManagement/userManagement.js' %}"></script>
{% endblock %}