rhodecode-enterprise-ce Files · rhodecode/templates/base/perms_summary.mako

permissions: explicitly register all permissions set for user. Fixes ...

permissions: explicitly register all permissions set for user. Fixes - in order to get a proper inheritance chain of permissions we'll register each step. This allows to get full inheritance chain. Final permissions will be the same becuase the only thing we change is we register each step before permissions final value. - Also display the permissions summary in a nicer way more explicitly stating what permissions overwrites which.

marcink - - Load All Authors

File last commit:

r2063:8a6e9139 default


                r2063:8a6e9139

default

Download file

             perms_summary.mako
        
                    268 lines
            
             | 12.1 KiB
            
                | application/x-mako
            
             |
                MakoHtmlLexer
            
             / rhodecode / templates / base / perms_summary.mako
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
      ## snippet for displaying permissions overview for users

      ## usage:

      ##    <%namespace name="p" file="/base/perms_summary.mako"/>

      ##    ${p.perms_summary(c.perm_user.permissions)}

        marcink
    
users/user_groups: ported permission summary pages into pyramid....

              r1998
            
      <%def name="perms_summary(permissions, show_all=False, actions=True, side_link=None)">

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
      <div id="perms" class="table fields">

        %for section in sorted(permissions.keys()):

        <div class="panel panel-default">

          <div class="panel-heading">

              <h3 class="panel-title">${section.replace("_"," ").capitalize()}</h3>

        marcink
    
users/user_groups: ported permission summary pages into pyramid....

              r1998
            
              % if side_link:

                  <div class="pull-right">

                      <a href="${side_link}">${_('in JSON format')}</a>

                  </div>

              % endif

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
          </div>

          <div class="panel-body">

            <div class="perms_section_head field">

              <div class="radios">

                %if section != 'global':

                    <span class="permissions_boxes">

                    <span class="desc">${_('show')}: </span>

                    ${h.checkbox('perms_filter_none_%s' % section, 'none', 'checked', class_='perm_filter filter_%s' % section, section=section, perm_type='none')}   <label for="${'perms_filter_none_%s' % section}"><span class="perm_tag none">${_('none')}</span></label>

                    ${h.checkbox('perms_filter_read_%s' % section, 'read', 'checked', class_='perm_filter filter_%s' % section, section=section, perm_type='read')}   <label for="${'perms_filter_read_%s' % section}"><span class="perm_tag read">${_('read')}</span></label>

                    ${h.checkbox('perms_filter_write_%s' % section, 'write', 'checked', class_='perm_filter filter_%s' % section, section=section, perm_type='write')} <label for="${'perms_filter_write_%s' % section}"> <span class="perm_tag write">${_('write')}</span></label>

                    ${h.checkbox('perms_filter_admin_%s' % section, 'admin', 'checked', class_='perm_filter filter_%s' % section, section=section, perm_type='admin')} <label for="${'perms_filter_admin_%s' % section}"><span class="perm_tag admin">${_('admin')}</span></label>

                    </span>

                %endif

              </div>

            </div>

            <div class="field">

              %if not permissions[section]:

                  <p class="empty_data help-block">${_('No permissions defined')}</p>

              %else:

              <div id='tbl_list_wrap_${section}'>

               <table id="tbl_list_${section}" class="rctable">

                ## global permission box

                %if section == 'global':

                  <thead>

                      <tr>

                      <th colspan="2" class="left">${_('Permission')}</th>

                      %if actions:

        marcink
    
perms: updated perms summary for users...

              r2011
            
                      <th colspan="2">${_('Edit Permission')}</th>

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                      %endif

                  </thead>

                  <tbody>

                  <%

                    def get_section_perms(prefix, opts):

                        _selected = []

                        for op in opts:

                            if op.startswith(prefix) and not op.startswith('hg.create.write_on_repogroup'):

                                _selected.append(op)

                        admin = 'hg.admin' in opts

                        _selected_vals = [x.partition(prefix)[-1] for x in _selected]

                        return admin, _selected_vals, _selected

                  %>

        marcink
    
perms: updated perms summary for users...

              r2011
            
                  <%def name="glob(lbl, val, val_lbl=None, edit_url=None, edit_global_url=None)">

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                    <tr>

                      <td class="td-tags">

                          ${lbl}

                      </td>

                      <td class="td-tags">

                          %if val[0]:

                            %if not val_lbl:

        marcink
    
perms: updated perms summary for users...

              r2011
            
                                ## super admin case

                                True

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                            %else:

                                <span class="perm_tag admin">${val_lbl}.admin</span>

                            %endif

                          %else:

                            %if not val_lbl:

        marcink
    
perms: use text labels about given permissions instead of potentially display icon....

              r2010
            
                                ${

                                   {'false': False,

                                   'true': True,

                                   'none': False,

                                   'repository': True}.get(val[1][0] if 0 < len(val[1]) else 'false')

                                }

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                            %else:

                                <span class="perm_tag ${val[1][0]}">${val_lbl}.${val[1][0]}</span>

                            %endif

                          %endif

                      </td>

                      %if actions:

        marcink
    
perms: updated perms summary for users...

              r2011
            
                          % if edit_url or edit_global_url:

                              <td class="td-action">

                                  % if edit_url:

                                  <a href="${edit_url}">${_('edit')}</a>

                                  % else:

                                      -

                                  % endif

                              </td>

                              <td class="td-action">

                                  % if edit_global_url:

                                  <a href="${edit_global_url}">${_('edit global')}</a>

                                  % else:

                                      -

                                  % endif

                              </td>

                          % else:

                              <td class="td-action"></td>

                              <td class="td-action">

                                  <a href="${h.route_path('admin_permissions_global')}">${_('edit global')}</a>

                              <td class="td-action">

                          % endif

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                      %endif

                    </tr>

                  </%def>

        marcink
    
perms: updated perms summary for users...

              r2011
            
                 ${glob(_('Repository default permission'), get_section_perms('repository.', permissions[section]), 'repository',

                      edit_url=None, edit_global_url=h.route_path('admin_permissions_object'))}

                 ${glob(_('Repository group default permission'), get_section_perms('group.', permissions[section]), 'group',

                      edit_url=None, edit_global_url=h.route_path('admin_permissions_object'))}

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
        marcink
    
perms: updated perms summary for users...

              r2011
            
                 ${glob(_('User group default permission'), get_section_perms('usergroup.', permissions[section]), 'usergroup',

                      edit_url=None, edit_global_url=h.route_path('admin_permissions_object'))}

                 ${glob(_('Super admin'), get_section_perms('hg.admin', permissions[section]),

                      edit_url=h.url('edit_user', user_id=c.user.user_id, anchor='admin'), edit_global_url=None)}

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
        marcink
    
perms: updated perms summary for users...

              r2011
            
                 ${glob(_('Inherit permissions'), get_section_perms('hg.inherit_default_perms.', permissions[section]),

                      edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=None)}

                 ${glob(_('Create repositories'), get_section_perms('hg.create.', permissions[section]),

                      edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=h.route_path('admin_permissions_object'))}

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
        marcink
    
perms: updated perms summary for users...

              r2011
            
                 ${glob(_('Fork repositories'), get_section_perms('hg.fork.', permissions[section]),

                      edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=h.route_path('admin_permissions_object'))}

                 ${glob(_('Create repository groups'), get_section_perms('hg.repogroup.create.', permissions[section]),

                      edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=h.route_path('admin_permissions_object'))}

                 ${glob(_('Create user groups'), get_section_perms('hg.usergroup.create.', permissions[section]),

                      edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=h.route_path('admin_permissions_object'))}

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                 </tbody>

                %else:

                 ## none/read/write/admin permissions on groups/repos etc

                  <thead>

                      <tr>

                      <th>${_('Name')}</th>

                      <th>${_('Permission')}</th>

                      %if actions:

                      <th>${_('Edit Permission')}</th>

                      %endif

                  </thead>

                  <tbody class="section_${section}">

                  <%

                      def sorter(permissions):

                          def custom_sorter(item):

                             ## read/write/admin

                             section = item[1].split('.')[-1]

                             section_importance = {'none': u'0',

                                                   'read': u'1',

                                                   'write':u'2',

                                                   'admin':u'3'}.get(section)

                             ## sort by group importance+name

                             return section_importance+item[0]

                          return sorted(permissions, key=custom_sorter)

                  %>

                  %for k, section_perm in sorter(permissions[section].items()):

                      %if section_perm.split('.')[-1] != 'none' or show_all:

                      <tr class="perm_row ${'%s_%s' % (section, section_perm.split('.')[-1])}">

        marcink
    
perms: fixed html error in template

              r2059
            
                          <td class="td-name">

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                              %if section == 'repositories':

        marcink
    
repo-summary: re-implemented  summary view as pyramid....

              r1785
            
                                  <a href="${h.route_path('repo_summary',repo_name=k)}">${k}</a>

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                              %elif section == 'repositories_groups':

        marcink
    
home: moved home and repo group views into pyramid....

              r1774
            
                                  <a href="${h.route_path('repo_group_home', repo_group_name=k)}">${k}</a>

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                              %elif section == 'user_groups':

                                  ##<a href="${h.url('edit_users_group',user_group_id=k)}">${k}</a>

                                  ${k}

                              %endif

                          </td>

                          <td class="td-tags">

                            %if hasattr(permissions[section], 'perm_origin_stack'):

        marcink
    
permissions: explicitly register all permissions set for user. Fixes #4217...

              r2063
            
                               <div>

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                               %for i, (perm, origin) in enumerate(reversed(permissions[section].perm_origin_stack[k])):

        marcink
    
permissions: explicitly register all permissions set for user. Fixes #4217...

              r2063
            
                               % if i > 0:

                                   <div style="color: #979797">

                                   <i class="icon-arrow_up"></i>

                                       ${_('overridden by')}

                                   <i class="icon-arrow_up"></i>

                                   </div>

                               % endif

                               <div>

                                   <span class="${i > 0 and 'perm_overriden' or ''} perm_tag ${perm.split('.')[-1]}">

                                    ${perm} (${origin})

                                   </span>

                               </div>

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                               %endfor

        marcink
    
permissions: explicitly register all permissions set for user. Fixes #4217...

              r2063
            
                               </div>

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                            %else:

                               <span class="perm_tag ${section_perm.split('.')[-1]}">${section_perm}</span>

                            %endif

                          </td>

                          %if actions:

                          <td class="td-action">

                              %if section == 'repositories':

        marcink
    
translation: unified usage of pluralize function ungettext....

              r1945
            
                                  <a href="${h.route_path('edit_repo_perms',repo_name=k,_anchor='permissions_manage')}">${_('edit')}</a>

        marcink
    
templating: use .mako as extensions for template files.

              r1282
            
                              %elif section == 'repositories_groups':

                                  <a href="${h.url('edit_repo_group_perms',group_name=k,anchor='permissions_manage')}">${_('edit')}</a>

                              %elif section == 'user_groups':

                                  ##<a href="${h.url('edit_users_group',user_group_id=k)}">${_('edit')}</a>

                              %endif

                          </td>

                          %endif

                      </tr>

                      %endif

                  %endfor

                  <tr id="empty_${section}" class="noborder" style="display:none;">

                    <td colspan="6">${_('No permission defined')}</td>

                  </tr>

                  </tbody>

                %endif

               </table>

              </div>

              %endif

            </div>

          </div>

        </div>

        %endfor

      </div>

      <script>

          $(document).ready(function(){

              var show_empty = function(section){

                  var visible = $('.section_{0} tr.perm_row:visible'.format(section)).length;

                  if(visible == 0){

                      $('#empty_{0}'.format(section)).show();

                  }

                  else{

                      $('#empty_{0}'.format(section)).hide();

                  }

              };

              $('.perm_filter').on('change', function(e){

                  var self = this;

                  var section = $(this).attr('section');

                  var opts = {};

                  var elems = $('.filter_' + section).each(function(el){

                      var perm_type = $(this).attr('perm_type');

                      var checked = this.checked;

                      opts[perm_type] = checked;

                      if(checked){

                          $('.'+section+'_'+perm_type).show();

                      }

                      else{

                          $('.'+section+'_'+perm_type).hide();

                      }

                  });

                  show_empty(section);

              })

          })

      </script>

      </%def>

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

marcink templating: use .mako as extensions for template files.	r1282	## snippet for displaying permissions overview for users
		## usage:
		## <%namespace name="p" file="/base/perms_summary.mako"/>
		## ${p.perms_summary(c.perm_user.permissions)}

marcink users/user_groups: ported permission summary pages into pyramid....	r1998	<%def name="perms_summary(permissions, show_all=False, actions=True, side_link=None)">
marcink templating: use .mako as extensions for template files.	r1282	<div id="perms" class="table fields">
		%for section in sorted(permissions.keys()):
		<div class="panel panel-default">
		<div class="panel-heading">
		<h3 class="panel-title">${section.replace("_"," ").capitalize()}</h3>
marcink users/user_groups: ported permission summary pages into pyramid....	r1998	% if side_link:
		<div class="pull-right">
		<a href="${side_link}">${_('in JSON format')}</a>
		</div>
		% endif
marcink templating: use .mako as extensions for template files.	r1282	</div>
		<div class="panel-body">
		<div class="perms_section_head field">
		<div class="radios">
		%if section != 'global':
		<span class="permissions_boxes">
		<span class="desc">${_('show')}: </span>
		${h.checkbox('perms_filter_none_%s' % section, 'none', 'checked', class_='perm_filter filter_%s' % section, section=section, perm_type='none')} <label for="${'perms_filter_none_%s' % section}"><span class="perm_tag none">${_('none')}</span></label>
		${h.checkbox('perms_filter_read_%s' % section, 'read', 'checked', class_='perm_filter filter_%s' % section, section=section, perm_type='read')} <label for="${'perms_filter_read_%s' % section}"><span class="perm_tag read">${_('read')}</span></label>
		${h.checkbox('perms_filter_write_%s' % section, 'write', 'checked', class_='perm_filter filter_%s' % section, section=section, perm_type='write')} <label for="${'perms_filter_write_%s' % section}"> <span class="perm_tag write">${_('write')}</span></label>
		${h.checkbox('perms_filter_admin_%s' % section, 'admin', 'checked', class_='perm_filter filter_%s' % section, section=section, perm_type='admin')} <label for="${'perms_filter_admin_%s' % section}"><span class="perm_tag admin">${_('admin')}</span></label>
		</span>
		%endif
		</div>
		</div>
		<div class="field">
		%if not permissions[section]:
		<p class="empty_data help-block">${_('No permissions defined')}</p>
		%else:
		<div id='tbl_list_wrap_${section}'>
		<table id="tbl_list_${section}" class="rctable">
		## global permission box
		%if section == 'global':
		<thead>
		<tr>
		<th colspan="2" class="left">${_('Permission')}</th>
		%if actions:
marcink perms: updated perms summary for users...	r2011	<th colspan="2">${_('Edit Permission')}</th>
marcink templating: use .mako as extensions for template files.	r1282	%endif
		</thead>
		<tbody>

		<%
		def get_section_perms(prefix, opts):
		_selected = []
		for op in opts:
		if op.startswith(prefix) and not op.startswith('hg.create.write_on_repogroup'):
		_selected.append(op)
		admin = 'hg.admin' in opts
		_selected_vals = [x.partition(prefix)[-1] for x in _selected]
		return admin, _selected_vals, _selected
		%>
marcink perms: updated perms summary for users...	r2011
		<%def name="glob(lbl, val, val_lbl=None, edit_url=None, edit_global_url=None)">
marcink templating: use .mako as extensions for template files.	r1282	<tr>
		<td class="td-tags">
		${lbl}
		</td>
		<td class="td-tags">
		%if val[0]:
		%if not val_lbl:
marcink perms: updated perms summary for users...	r2011	## super admin case
		True
marcink templating: use .mako as extensions for template files.	r1282	%else:
		<span class="perm_tag admin">${val_lbl}.admin</span>
		%endif
		%else:
		%if not val_lbl:
marcink perms: use text labels about given permissions instead of potentially display icon....	r2010	${
		{'false': False,
		'true': True,
		'none': False,
		'repository': True}.get(val[1][0] if 0 < len(val[1]) else 'false')
		}
marcink templating: use .mako as extensions for template files.	r1282	%else:
		<span class="perm_tag ${val[1][0]}">${val_lbl}.${val[1][0]}</span>
		%endif
		%endif
		</td>
		%if actions:
marcink perms: updated perms summary for users...	r2011
		% if edit_url or edit_global_url:

		<td class="td-action">
		% if edit_url:
		<a href="${edit_url}">${_('edit')}</a>
		% else:
		-
		% endif
		</td>

		<td class="td-action">
		% if edit_global_url:
		<a href="${edit_global_url}">${_('edit global')}</a>
		% else:
		-
		% endif
		</td>

		% else:
		<td class="td-action"></td>
		<td class="td-action">
		<a href="${h.route_path('admin_permissions_global')}">${_('edit global')}</a>
		<td class="td-action">
		% endif

marcink templating: use .mako as extensions for template files.	r1282	%endif
		</tr>
		</%def>

marcink perms: updated perms summary for users...	r2011	${glob(_('Repository default permission'), get_section_perms('repository.', permissions[section]), 'repository',
		edit_url=None, edit_global_url=h.route_path('admin_permissions_object'))}

		${glob(_('Repository group default permission'), get_section_perms('group.', permissions[section]), 'group',
		edit_url=None, edit_global_url=h.route_path('admin_permissions_object'))}
marcink templating: use .mako as extensions for template files.	r1282
marcink perms: updated perms summary for users...	r2011	${glob(_('User group default permission'), get_section_perms('usergroup.', permissions[section]), 'usergroup',
		edit_url=None, edit_global_url=h.route_path('admin_permissions_object'))}

		${glob(_('Super admin'), get_section_perms('hg.admin', permissions[section]),
		edit_url=h.url('edit_user', user_id=c.user.user_id, anchor='admin'), edit_global_url=None)}
marcink templating: use .mako as extensions for template files.	r1282
marcink perms: updated perms summary for users...	r2011	${glob(_('Inherit permissions'), get_section_perms('hg.inherit_default_perms.', permissions[section]),
		edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=None)}

		${glob(_('Create repositories'), get_section_perms('hg.create.', permissions[section]),
		edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=h.route_path('admin_permissions_object'))}
marcink templating: use .mako as extensions for template files.	r1282
marcink perms: updated perms summary for users...	r2011	${glob(_('Fork repositories'), get_section_perms('hg.fork.', permissions[section]),
		edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=h.route_path('admin_permissions_object'))}

		${glob(_('Create repository groups'), get_section_perms('hg.repogroup.create.', permissions[section]),
		edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=h.route_path('admin_permissions_object'))}

		${glob(_('Create user groups'), get_section_perms('hg.usergroup.create.', permissions[section]),
		edit_url=h.url('edit_user_global_perms', user_id=c.user.user_id), edit_global_url=h.route_path('admin_permissions_object'))}
marcink templating: use .mako as extensions for template files.	r1282
		</tbody>
		%else:
		## none/read/write/admin permissions on groups/repos etc
		<thead>
		<tr>
		<th>${_('Name')}</th>
		<th>${_('Permission')}</th>
		%if actions:
		<th>${_('Edit Permission')}</th>
		%endif
		</thead>
		<tbody class="section_${section}">
		<%
		def sorter(permissions):
		def custom_sorter(item):
		## read/write/admin
		section = item[1].split('.')[-1]
		section_importance = {'none': u'0',
		'read': u'1',
		'write':u'2',
		'admin':u'3'}.get(section)
		## sort by group importance+name
		return section_importance+item[0]
		return sorted(permissions, key=custom_sorter)
		%>
		%for k, section_perm in sorter(permissions[section].items()):
		%if section_perm.split('.')[-1] != 'none' or show_all:
		<tr class="perm_row ${'%s_%s' % (section, section_perm.split('.')[-1])}">
marcink perms: fixed html error in template	r2059	<td class="td-name">
marcink templating: use .mako as extensions for template files.	r1282	%if section == 'repositories':
marcink repo-summary: re-implemented summary view as pyramid....	r1785	<a href="${h.route_path('repo_summary',repo_name=k)}">${k}</a>
marcink templating: use .mako as extensions for template files.	r1282	%elif section == 'repositories_groups':
marcink home: moved home and repo group views into pyramid....	r1774	<a href="${h.route_path('repo_group_home', repo_group_name=k)}">${k}</a>
marcink templating: use .mako as extensions for template files.	r1282	%elif section == 'user_groups':
		##<a href="${h.url('edit_users_group',user_group_id=k)}">${k}</a>
		${k}
		%endif
		</td>
		<td class="td-tags">
		%if hasattr(permissions[section], 'perm_origin_stack'):
marcink permissions: explicitly register all permissions set for user. Fixes #4217...	r2063	<div>
marcink templating: use .mako as extensions for template files.	r1282	%for i, (perm, origin) in enumerate(reversed(permissions[section].perm_origin_stack[k])):
marcink permissions: explicitly register all permissions set for user. Fixes #4217...	r2063
		% if i > 0:
		<div style="color: #979797">
		<i class="icon-arrow_up"></i>
		${_('overridden by')}
		<i class="icon-arrow_up"></i>
		</div>
		% endif

		<div>
		<span class="${i > 0 and 'perm_overriden' or ''} perm_tag ${perm.split('.')[-1]}">
		${perm} (${origin})
		</span>
		</div>

marcink templating: use .mako as extensions for template files.	r1282	%endfor
marcink permissions: explicitly register all permissions set for user. Fixes #4217...	r2063	</div>
marcink templating: use .mako as extensions for template files.	r1282	%else:
		<span class="perm_tag ${section_perm.split('.')[-1]}">${section_perm}</span>
		%endif
		</td>
		%if actions:
		<td class="td-action">
		%if section == 'repositories':
marcink translation: unified usage of pluralize function ungettext....	r1945	<a href="${h.route_path('edit_repo_perms',repo_name=k,_anchor='permissions_manage')}">${_('edit')}</a>
marcink templating: use .mako as extensions for template files.	r1282	%elif section == 'repositories_groups':
		<a href="${h.url('edit_repo_group_perms',group_name=k,anchor='permissions_manage')}">${_('edit')}</a>
		%elif section == 'user_groups':
		##<a href="${h.url('edit_users_group',user_group_id=k)}">${_('edit')}</a>
		%endif
		</td>
		%endif
		</tr>
		%endif
		%endfor

		<tr id="empty_${section}" class="noborder" style="display:none;">
		<td colspan="6">${_('No permission defined')}</td>
		</tr>

		</tbody>
		%endif
		</table>
		</div>
		%endif
		</div>
		</div>
		</div>
		%endfor
		</div>

		<script>
		$(document).ready(function(){
		var show_empty = function(section){
		var visible = $('.section_{0} tr.perm_row:visible'.format(section)).length;
		if(visible == 0){
		$('#empty_{0}'.format(section)).show();
		}
		else{
		$('#empty_{0}'.format(section)).hide();
		}
		};
		$('.perm_filter').on('change', function(e){
		var self = this;
		var section = $(this).attr('section');

		var opts = {};
		var elems = $('.filter_' + section).each(function(el){
		var perm_type = $(this).attr('perm_type');
		var checked = this.checked;
		opts[perm_type] = checked;
		if(checked){
		$('.'+section+'_'+perm_type).show();
		}
		else{
		$('.'+section+'_'+perm_type).hide();
		}
		});
		show_empty(section);
		})
		})
		</script>
		</%def>