{% extends "base_template.html" %}

{% block title %}{{ _('Users') }} - {{ _('Admin') }}{% endblock %}

{% block breadcrumb %}
<nav aria-label="breadcrumb">
    <ol class="breadcrumb">
        {% if panel_url %}<li class="breadcrumb-item"><a href="{{ panel_url }}">{{ _('Admin') }}</a></li>{% endif %}
        <li class="breadcrumb-item active">{{ _('Users') }}</li>
    </ol>
</nav>
{% endblock %}

{% block content %}

<div class="d-flex flex-column align-items-start gap-2 mb-4">
    <h1 class="h2 mb-0"><b>{{ _('Users') }}</b></h1>
    <a href="{{ url_for('auth.admin_users_new') }}" class="btn btn-success">+ {{ _('New account') }}</a>
</div>

{% with messages = get_flashed_messages(with_categories=true) %}
    {% for category, message in messages %}
        <div class="alert alert-{{ category }} alert-dismissible fade show" role="alert">
            {{ message }}
            <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
        </div>
    {% endfor %}
{% endwith %}

{% if users %}
<div class="table-responsive">
    <table class="table table-striped table-hover align-middle">
        <thead class="table-dark">
            <tr>
                <th>{{ _('Email') }}</th>
                <th>{{ _('Role') }}</th>
                <th>{{ _('Status') }}</th>
                <th>{{ _('Created') }}</th>
                {# Pinned to the right in the panel (admin's panel.css), so
                   Edit and Delete stay in view on a phone. #}
                <th class="text-end sp-sticky-end">{{ _('Actions') }}</th>
            </tr>
        </thead>
        <tbody>
            {% for user in users %}
            <tr>
                <td>{{ user.email or '' }}{% if user.id == current_user.id %} <span class="badge bg-secondary">{{ _('you') }}</span>{% endif %}</td>
                <td>
                    {% if user.role == 'admin' %}<span class="badge bg-primary">{{ _('Administrator') }}</span>
                    {% elif user.role == 'staff' %}<span class="badge bg-info text-dark">{{ _('Staff') }}</span>
                    {% elif user.role == 'user' %}<span class="badge bg-light text-dark border">{{ _('User') }}</span>
                    {# A role the vocabulary does not know, written by an earlier set-role or by hand. Spelled as stored, so it is not mistaken for a plain user. #}
                    {% else %}<span class="badge bg-secondary">{{ user.role }}</span>{% endif %}
                </td>
                <td>
                    {% if user.active %}<span class="text-success">{{ _('Active') }}</span>
                    {% else %}<span class="text-muted">{{ _('Inactive') }}</span>{% endif %}
                </td>
                <td class="text-muted small">{{ user.created_at.strftime('%Y-%m-%d') if user.created_at else '' }}</td>
                <td class="text-end text-nowrap sp-sticky-end">
                    <a href="{{ url_for('auth.admin_users_edit', user_id=user.id) }}" class="btn btn-sm btn-outline-primary">{{ _('Edit') }}</a>
                    {% if user.id != current_user.id %}
                    {# Deactivating is the usual answer and lives on the edit
                       screen; this is for the account created by mistake.
                       The address is the account holder's own text, so it
                       reaches the script as plain text (striptags undoes
                       the HTML escaping) turned into JSON, in a single
                       quoted attribute no quote in it can leave. #}
                    <form method="POST" class="d-inline"
                          action="{{ url_for('auth.admin_users_delete', user_id=user.id) }}"
                          onsubmit='return confirm({{ _("Delete %(email)s for good?", email=user.email) | striptags | tojson }})'>
                        {{ confirm_form.hidden_tag() }}
                        <button class="btn btn-sm btn-outline-danger" type="submit">{{ _('Delete') }}</button>
                    </form>
                    {% endif %}
                </td>
            </tr>
            {% endfor %}
        </tbody>
    </table>
</div>
{% else %}
<div class="alert alert-info">
    {{ _('There are no accounts yet.') }}
    <a href="{{ url_for('auth.admin_users_new') }}">{{ _('Create the first one.') }}</a>
</div>
{% endif %}

{% endblock %}