lists.sr.ht/listssrht/templates/settings-access.html

{% extends "settings.html" %}
{% block title %}
<title>
  {{ owner.canonical_name }}/{{ ml.name }} settings &mdash; {{ cfg("sr.ht", "site-name") }} lists
</title>
{% endblock %}

{% macro perm_checkbox(type, perms, name, readonly=False) %}
{% if type.name not in ["none", "normal", "all"] %}
<div class="form-check form-check-inline">
  <label
    class="form-check-label"
    title="{{access_help_map[type]}}"
  >
    {% if readonly %}
      {% if type in perms %}
        {{icon('check', cls='text-success')}}
      {% else %}
        <span style="display: inline-block; min-width: 16px;">
          {{icon('times', cls='text-danger')}}
        </span>
      {% endif %}
      {{type.name}}
    {% else %}
    <input
      class="form-check-input"
      type="checkbox"
      {% if name %}
      name="perm_{{ name }}_{{ type.name }}"
      {% endif %}
      value="{{type.value}}"
      {% if readonly %}
      disabled
      {% endif %}
      {{ "checked" if type in perms }}
    > {{type.name}}
    {% endif %}
  </label>
</div>
{% endif %}
{% endmacro %}

{% block content %}
<div class="container">
  {% if not hide_global %}
  <div class="row">
    <div class="col-md-10">
      <form method="POST">
        <h3>Global permissions</h3>
        {{csrf_token()}}
        <div class="form-group {{valid.cls("list_any_access")}}">
          <p>
            These permissions allow you to control what kinds of users are able
            to do what sorts of activities on your mailing list.
          </p>
          <div class="event-list">
            <div class="event">
              <h4>Default Permissions</h4>
              <p>
                These permissions are used for anyone who does not have a more
                specific access configuration.
              </p>
              {% for a in access_type_list %}
              {{ perm_checkbox(a, ml.default_access, "default") }}
              {% endfor %}
              {{ valid.summary("list_default_access") }}
            </div>
          </div>
        </div>
        <p>The list owner (you) is always granted all permissions.</p>
        {{ valid.summary() }}
        <span class="pull-right">
          <button type="submit" class="btn btn-primary">
            Save changes {{icon("caret-right")}}
          </button>
        </span>
      </form>
    </div>
  </div>
  {% endif %}
  {% if not hide_user %}
  <div class="row">
    <div class="col-md-12">
      <h3>User permissions</h3>
      {% if any(ml.acls) %}
      <table class="table">
        <thead>
          <tr>
            <th>user</th>
            <th>granted</th>
            <th>access</th>
            <th></th>
          </tr>
        </thead>
        <tbody>
          {% for acl in ml.acls %}
          <tr>
            <td>
              {% if acl.user %}
              <a
                href="{{url_for("user.user_profile",
                  username=acl.user.username)}}"
              >~{{acl.user.username}}</a>
              {% else %}
              <a href="mailto:{{ acl.email }}">{{acl.email}}</a>
              {% endif %}
            </td>
            <td>{{ acl.created | date }}</td>
            <td>
              {% for a in access_type_list %}
              {{ perm_checkbox(a, acl.permissions, None, readonly=True) }}
              {% endfor %}
            </td>
            <td style="width: 6rem">
              <form
                method="POST"
                action="{{url_for("settings.acl_delete_POST",
                  owner_name=ml.owner.canonical_name, list_name=ml.name,
                  acl_id=acl.id)}}"
              >
                {{csrf_token()}}
                <button type="submit" class="btn btn-danger btn-fill">
                  Delete
                </button>
              </form>
            </td>
          </tr>
          {% endfor %}
        </tbody>
      </table>
      {% endif %}
    </div>
  </div>
  <div class="row">
    <div class="col-md-12">
      <form method="POST" action="{{url_for("settings.acl_POST", 
            owner_name=ml.owner.canonical_name, list_name=ml.name)}}">
        {{csrf_token()}}
        <div class="form-group">
          <label for="user">Username or email</label>
          <input
            type="text"
            class="form-control {{valid.cls("user")}}"
            id="user"
            name="user"
            placeholder="~{{ current_user.username }} or {{current_user.email}}"
            value="{{user or ""}}"
          />
          {{valid.summary("user")}}
        </div>
        <div class="event-list">
          <div class="event">
            <h4>Access grants</h4>
            <p>These will override any other permissions for this user.</p>
            {% for a in access_type_list %}
            {{ perm_checkbox(a, ListAccess.all, "acl") }}
            {% endfor %}
            {{ valid.summary("list_acl_access") }}
          </div>
        </div>
        {{ valid.summary() }}
        <span class="pull-right">
          <button type="submit" class="btn btn-primary">
            Set access {{icon("caret-right")}}
          </button>
        </span>
      </form>
    </div>
  </div>
  {% endif %}
</div>
{% endblock %}