{* $Id$ *}

{title help="Permissions"}{if $objectType eq 'global'}{tr}Assign global permissions{/tr}{else}{tr}Assign permissions to {/tr}{$objectType}: {$objectName}{/if}{/title}

<div class="t_navbar mb-4">
    {if !empty($referer)}{button href="$referer" _class="btn btn-link" _type="link" _icon_name="back" _text="{tr}Back{/tr}"}{/if}
    {if $tiki_p_admin eq 'y'} {* only full admins can manage groups, not tiki_p_admin_users *}
        {button href="tiki-admingroups.php" class="btn btn-link" _type="link" _icon_name="group" _text="{tr}Admin Groups{/tr}"}
    {/if}
    {if $tiki_p_admin_users eq 'y'}
        {button href="tiki-adminusers.php" class="btn btn-link" _type="link" _icon_name="user" _text="{tr}Admin users{/tr}"}
    {/if}
    {if $tiki_p_admin_categories eq 'y'}
        {button href="tiki-admin_categories.php" class="btn btn-link" _type="link" _icon_name="admin_category" _text="{tr}Admin Categories{/tr}"}
    {/if}
    {button href="tiki-list_object_permissions.php" class="btn btn-link" _type="link" _icon_name="permission" _text="{tr}Object Permissions List{/tr}"}
</div>

{tabset name='tabs_objectpermissions'}

    {tab name="{tr}Assign Permissions{/tr}"}

        {if $prefs.feature_tabs neq 'y'}
            <h2>{tr}Edit Permissions{/tr}</h2>
        {/if}
        <form method="post" action="{$smarty.server.SCRIPT_NAME}?{query}">
            {ticket}
            {capture name="notices"}
                {if empty($filegals_manager)}
                    {if $objectType eq 'global'}
                        {remarksbox type="note" title="{tr}Note{/tr}"}
                            {tr}Currently editing Global permissions.{/tr}
                        {/remarksbox}
                    {elseif $permissions_displayed eq 'direct'}
                        {remarksbox type="warning" title="{tr}Warning{/tr}"}
                            {if $objectType neq 'category'}
                                {tr}This object's direct permissions override any global permissions or category permissions affecting this object.{/tr}
                            {else}
                                {tr}This category's direct permissions override any global permissions affecting objects in it.{/tr}
                            {/if}
                            <br>
                            {tr}To edit global permissions{/tr} {self_link objectType='global' objectId='' objectName='' permType=$permType _class='alert-link'}{tr}click here{/tr}{/self_link}.
                        {/remarksbox}
                    {elseif $permissions_displayed eq 'category'}
                        {remarksbox type="warning" title="{tr}Warning{/tr}"}
                            {tr}No permissions yet applied to this object but category permissions affect this object and are displayed below.{/tr}<br>
                            {if $tiki_p_admin eq 'y'}{tr}To edit category permissions{/tr} {self_link _script='tiki-admin_categories.php' _class='alert-link'}{tr}click here{/tr}{/self_link}.{/if}
                        {/remarksbox}
                    {elseif $permissions_displayed eq 'parent'}
                        {remarksbox type="warning" title="{tr}Warning{/tr}"}
                            {tr}No permissions yet applied to this object but parent object's permissions affect this object and are displayed below.{/tr}<br>
                            {if $tiki_p_admin eq 'y'}{tr}To edit parent object's permissions{/tr} {self_link objectType=$permissions_parent_type objectId=$permissions_parent_id objectName=$permissions_parent_name _class='alert-link'}{tr}click here{/tr}{/self_link}.{/if}
                        {/remarksbox}
                    {elseif $permissions_displayed eq 'global'}
                        {remarksbox type="warning" title="{tr}Warning{/tr}" highlight="y"}
                            {tr}No direct permissions yet applied to this object. Global permissions apply.{/tr}<br>
                            {if $tiki_p_admin eq 'y'}{tr}To edit global permissions{/tr} {self_link objectType='global' permType=$permType _class='alert-link'}{tr}click here{/tr}{/self_link}.{/if}
                            <br><br>
                            {tr}Currently inherited permissions displayed.{/tr}
                        {/remarksbox}
                    {/if}
                {/if}
                {if $objectType eq 'category' and $groupRole}
                {remarksbox type="warning" title="{tr}Warning{/tr}"}
                {tr}This category's permissions are being managed by a Group Role.{/tr}<br>
                {/remarksbox}
                {/if}
            {/capture}
            {$smarty.capture.notices}
            <br/>

            <label for="show_disabled_features2">{tr}Show permissions for disabled features{/tr}</label>
            <input type="checkbox" name="show_disabled_features" id="show_disabled_features2" {if isset($show_disabled_features) and $show_disabled_features eq 'y'}checked="checked"{/if} onchange="this.form.submit();">

            <hr>
            <h2>{if $objectType eq 'global'}{tr}Assign global permissions{/tr}{elseif $objectType eq 'category'}{tr}Assign permissions to this category{/tr}{else}{tr}Assign permissions to this object{/tr}{/if} {icon name="cog" id="perms_busy" style="vertical-align:top; display:none;"}</h2>

            <div>
                <input type="hidden" name="referer" value="{$referer|escape}">
                <input type="hidden" name="objectName" value="{$objectName|escape}">
                <input type="hidden" name="objectType" value="{$objectType|escape}">
                <input type="hidden" name="objectId" value="{$objectId|escape}">
                <input type="hidden" name="permType" value="{$permType|escape}">

                <div class="input_submit_container" style="text-align: center">
                    <input
                        type="submit"
                        class="btn btn-primary btn-sm"
                        name="assign"
                        value="{tr}Assign{/tr}"
                        onclick="confirmPopup('{tr}Modify permissions?{/tr}')"
                    >
                    {if $permissions_displayed eq 'direct' and $objectType neq 'global'}
                        {if $objectType == 'category'}
                            {$value="{tr}Delete category permissions{/tr}"}
                            {$title="{tr}This will remove all the settings here and permissions will be reset to inherit the global sitewide permissions.{/tr}"}
                            {$confirm="{tr}Delete category permissions?{/tr}"}
                        {else}
                            {$value="{tr}Delete object permissions{/tr}"}
                            {$title="{tr}This will remove all the settings here and permissions will be reset to inherit any category permissions that are set, or the global sitewide permissions.{/tr}"}
                            {$confirm="{tr}Delete object permissions?{/tr}"}
                        {/if}
                        <input
                            type="submit"
                            class="btn btn-danger btn-sm"
                            name="remove"
                            value="{$value}"
                            class="tips"
                            title="{tr}Reset Perms:{/tr}{$title}"
                    {/if}
                    <input type="submit" class="btn btn-secondary btn-sm" name="copy" value="{tr}Copy{/tr}" class="tips" title="{tr}Permissions Clipboard{/tr}|{tr}Copy the permissions set here{/tr}">
                    {if !empty($perms_clipboard_source)}<input type="submit" class="btn btn-primary btn-sm" name="paste" value="{tr}Paste{/tr}" class="tips" title="{tr}Permissions Clipboard{/tr}|{tr}Paste copied permissions from {/tr}<em>{$perms_clipboard_source}</em>" />{/if}
                </div>

                {if $objectType eq 'category'}
                    <p>
                        <input type="checkbox" id="propagate_category" name="propagate_category" value="1">
                        <label for="propagate_category">{tr}Assign or remove permissions on <em>all</em> child categories{/tr}</label>
                    </p>
                    {jq}
                        $("input[name='assign'],input[name='remove']").click(function(){
                            if ($("#propagate_category").prop("checked")) {
                                return confirm("{tr}Are you sure you want to affect all child categories?\nThere is no undo.{/tr}");
                            }
                        });
                    {/jq}
                {/if}

                {if ($objectType eq 'wiki' or $objectType eq 'wiki page') and !empty($inStructure)}
                    <input name="assignstructure" id="assignstructure" type="checkbox">
                    <label for="assignstructure">{tr}Assign or remove permissions on all pages of the sub-structure{/tr}</label>
                    {jq}
                        $("input[name='assign'],input[name='remove']").click(function(){
                            if ($("#assignstructure").prop("checked")) {
                                return confirm("{tr}Are you sure you want to affect all pages in this sub-structure?\nThere is no undo.{/tr}");
                            }
                        });
                    {/jq}
                {/if}

            </div>
            <h3>{tr}Permissions{/tr}</h3>

                <div class="permission_table table-responsive">
                    {treetable _data=$perms _checkbox=$permGroups _checkboxTitles=$groupNames
                        _checkboxTooltips=['_checkboxTitles', 'permDesc', 'permName'] _checkboxTooltipFormat='%0: %1 [%2]'
                        _checkboxColumnIndex=$permGroupCols _valueColumnIndex="permName"
                        _columns="\"label\"=\"{tr}Permission{/tr}\"" _groupColumn='type' _openall='y'
                        _showSelected='y' _columnsContainHtml='y' class='table objectperms'}
                </div>

            {if ($perms|@count) eq '0'}{remarksbox type="warning" title="{tr}Warning{/tr}"}{tr}You must select at least one feature{/tr}.{/remarksbox}{/if}

            <div class="input_submit_container" style="text-align: center">
                <input
                    type="submit"
                    class="btn btn-primary btn-sm"
                    name="assign"
                    value="{tr}Assign{/tr}"
                    onclick="confirmPopup('{tr}Modify permissions?{/tr}')"
                >
                {if $permissions_displayed eq 'direct' and $objectType neq 'global'}
                    <input type="submit" class="btn btn-danger btn-sm" name="remove" value="{if $objectType eq 'category'}{tr}Delete category permissions{/tr}{else}{tr}Delete object permissions{/tr}{/if}" class="tips" title="{tr}Reset Perms{/tr}|{tr}This will remove all the settings here and permissions will be reset to inherit the global sitewide permissions.{/tr}">
                {/if}
            </div>
        </form>

    {/tab}

    {if !empty($permissions_added) or !empty($permissions_removed)}
        {tab name="{tr}View Differences{/tr}"}
            {if !empty($permissions_added)}
                <h3>{tr}Permissions added:{/tr}</h3>
                <blockquote>{$permissions_added}</blockquote>
            {/if}
            {if !empty($permissions_removed)}
                <h3>{tr}Permissions removed:{/tr}</h3>
                <blockquote>{$permissions_removed}</blockquote>
            {/if}
        {/tab}
    {/if}

    {tab name="{tr}Select groups{/tr}"}
        <form method="post" action="{$smarty.server.SCRIPT_NAME}?{query}">
        <div>
            <input type="hidden" name="referer" value="{$referer|escape}">
            {if isset($groupsFiltered)}
                {remarksbox type="warning" title="{tr}Note{/tr}"}
                    {tr}Some of your groups have been automatically hidden.<br> Select the groups below to assign permissions for.{/tr}
                    {tr}These groups are not the groups that have permissions on the object. It is only the groups you can see in the columns of the first tab.{/tr}
                {/remarksbox}
            {else}
                {remarksbox type="note" title="{tr}Note{/tr}"}
                    {tr}These groups are not the groups that have permissions on the object. It is only the groups you can see in the columns of the first tab.{/tr}
                {/remarksbox}
            {/if}
            {if $objectId}
            <div class="t_navbar">
                <input type="submit" class="btn btn-primary btn-sm" name="used_groups" value="{tr}Select only groups that have a perm with the object{/tr}">
            </div>
            {/if}

            <h2>{tr}Groups{/tr}</h2>

            <div>
            {treetable _data=$groups _checkbox="group_filter" _checkboxTitles="{tr}Select all{/tr}"
                    _checkboxColumnIndex="in_group_filter" _valueColumnIndex="id"
                    _columns='"groupName"="{tr}Group name{/tr}","groupDesc"="{tr}Description{/tr}"'
                    _sortColumn='parents' _collapseMaxSections=20 _sortColumnDelimiter=',' _selectAllHiddenToo='y'}
            </div>

            <div class="input_submit_container" style="text-align: center">
                <input type="submit" class="btn btn-primary btn-sm" name="group_select" value="{tr}Select{/tr}">
            </div>
        </div>
        </form>
    {/tab}

    {tab name="{tr}Select features{/tr}"}
        <form method="post" action="{$smarty.server.SCRIPT_NAME}?{query}">
        <div>
            <input type="hidden" name="referer" value="{$referer|escape}">
            {if isset($featuresFiltered)}
                {remarksbox type="warning" title="{tr}Warning{/tr}"}
                    {tr}Some of your features have been automatically hidden.<br> Select the features below to assign permissions for.{/tr}
                {/remarksbox}
            {/if}

            <label for="show_disabled_features2">{tr}Show permissions for disabled features{/tr}</label>
            <input type="checkbox" name="show_disabled_features" id="show_disabled_features2" {if isset($show_disabled_features) and $show_disabled_features eq 'y'}checked="checked"{/if} onchange="this.form.submit();">

            <h2>{tr}Features{/tr}</h2>

            <div>
            {treetable _data=$features _checkbox="feature_filter" _checkboxTitles="{tr}Select all{/tr}" _checkboxColumnIndex="in_feature_filter" _valueColumnIndex="featureName" _columns='"featureName"="{tr}Feature name{/tr}"' _sortColumn="featureName" _sortColumnDelimiter='*' _collapseMaxSections=20 _listFilter='n'}
            </div>

            <div class="input_submit_container" style="text-align: center">
                <input type="submit" class="btn btn-primary btn-sm" name="feature_select" value="{tr}Select{/tr}">
            </div>
        </div>
        </form>
    {/tab}

    {* Quickperms *}

    {if $prefs.feature_quick_object_perms eq 'y'}
        {tab name="{tr}Quick Permissions{/tr}"}
        <form name="allperms" method="post" action="{$smarty.server.SCRIPT_NAME}?{query}">
        <div>
        <input type="hidden" name="quick_perms" value="true">


        {if $prefs.feature_tabs neq 'y'}
            <h2>{tr}Quick Permissions{/tr}</h2>
        {/if}

        {$smarty.capture.notices}

        <h2>{tr}Assign Quick-Permissions to this object{/tr}</h2>

        <table class="table">
            <tr>
                <th>{tr}Groups{/tr}</th>
            {foreach item=permgroup from=$quickperms}
                <th>{$permgroup.name}</th>
            {/foreach}
                <th class="tips" title="|{tr}Individual permissions are currently assigned (See tab Assign Permissions){/tr}">Advanced</th>
            </tr>

            {section name=grp loop=$groups}
                {if $groups[grp].groupName neq 'Admins'}
                    <tr>
                        <td>
                        {$groups[grp].groupName|escape}
                        </td>
                        {foreach item=permgroup from=$quickperms}
                        <td>
                            <input type="radio" name="perm_{$groups[grp].groupName|escape:url}" value="{$permgroup.name}" {if $groups[grp].groupSumm eq $permgroup.name}checked{/if}>
                        </td>
                        {/foreach}
                        <td>
                            <input type="radio" name="perm_{$groups[grp].groupName|escape:url}" value="userdefined" {if $groups[grp].groupSumm eq 'userdefined'}checked{/if} onclick="return false;">
                        </td>
                    </tr>
                {/if}
            {/section}
        </table>

        {ticket}
        <input type="hidden" name="referer" value="{$referer|escape}">
        <input type="hidden" name="objectName" value="{$objectName|escape}">
        <input type="hidden" name="objectType" value="{$objectType|escape}">
        <input type="hidden" name="objectId" value="{$objectId|escape}">
        <input type="hidden" name="permType" value="{$permType|escape}">
        <input type="hidden" name="show_disabled_features" value="{$show_disabled_features}">
        <label for="show_disabled_features3">{tr}Set permissions for disabled features{/tr}</label>
        <input type="checkbox" name="show_disabled_features" id="show_disabled_features3" {if isset($show_disabled_features) and $show_disabled_features eq 'y'}checked="checked"{/if}>
        <div class="input_submit_container" style="text-align: center">
            <input type="submit" class="btn btn-primary btn-sm" name="assign" value="{tr}Assign{/tr}">
        </div>

        {if empty($filegals_manager)}
            {remarksbox type="note" icon="bricks" title="{tr}Experimental{/tr}"}
                {tr}<em>Quick permissions</em> should be considered as an experimental feature.{/tr}<br/>
                {tr}Although permissions will be set as expected using this form, it doesn't necessarily show the current permissions reliably.{/tr}<br><br>
                {tr}There is also no undo - <strong>Use with care!</strong>{/tr}
            {/remarksbox}
        {/if}
        </div>
    </form>
    {/tab}
    {/if}

    {* Quickperms END *}

{/tabset}