{%- import 'ui/broker/_fmt.html' as fmt -%}
{%- macro row(label, stype, sname, r, w, a, revocable) -%}
<div class="acl-row" data-stype="{{ stype }}" data-sname="{{ sname }}">
  <span class="acl-name">{{ label }}</span>
  <label class="acl-cb"><input type="checkbox" data-perm="read"{{ ' checked' if r else '' }}></label>
  <label class="acl-cb"><input type="checkbox" data-perm="write"{{ ' checked' if w else '' }}></label>
  <label class="acl-cb"><input type="checkbox" data-perm="admin"{{ ' checked' if a else '' }}></label>
  {% if revocable %}<span class="acl-act"><button type="button" class="icon-btn acl-x" title="Revoke access">&times;</button></span>{% else %}<span class="acl-act"></span>{% endif %}
</div>
{%- endmacro -%}
{{ fmt.flash(message, tone) }}
<div class="acl-head"><span class="acl-col-name">NAME</span><span>READ</span><span>WRITE</span><span>ADMIN</span><span></span></div>
{{ row('Any valid token', '*', '*', star.read, star.write, star.admin, False) }}
{%- if owner %}
<div class="acl-row acl-owner" data-stype="owner" data-sname="{{ owner }}">
  <span class="acl-name">{{ owner }} <span class="acl-tag">owner</span></span>
  <label class="acl-cb"><input type="checkbox" checked disabled></label>
  <label class="acl-cb"><input type="checkbox" checked disabled></label>
  <label class="acl-cb"><input type="checkbox" checked disabled></label>
  <span class="acl-act"></span>
</div>
{%- endif %}
<div class="acl-group">Users</div>
{%- for u in users %}{{ row(u.subject_name, 'user', u.subject_name, u.read, u.write, u.admin, True) }}{% else %}<div class="acl-empty">No users granted.</div>{% endfor %}
<div class="acl-group">Services</div>
{%- for s in services %}{{ row(s.subject_name, 'service', s.subject_name, s.read, s.write, s.admin, True) }}{% else %}<div class="acl-empty">No services granted.</div>{% endfor %}