|
|
<%namespace name="base" file="/base/base.mako"/>
|
|
|
|
|
|
<div class="panel panel-default">
|
|
|
<div class="panel-heading">
|
|
|
<h3 class="panel-title">
|
|
|
<i class="icon-user-group" title="${_('User group')}"></i>
|
|
|
${h.link_to_group(c.user_group.users_group_name)}
|
|
|
- ${_('Access Permissions')}
|
|
|
</h3>
|
|
|
</div>
|
|
|
<div class="panel-body">
|
|
|
${h.secure_form(h.route_path('edit_user_group_perms_update', user_group_id=c.user_group.users_group_id), request=request)}
|
|
|
<table id="permissions_manage" class="rctable permissions">
|
|
|
<tr>
|
|
|
<th class="td-radio">${_('None')}</th>
|
|
|
<th class="td-radio">${_('Read')}</th>
|
|
|
<th class="td-radio">${_('Write')}</th>
|
|
|
<th class="td-radio">${_('Admin')}</th>
|
|
|
<th>${_('User/User Group')}</th>
|
|
|
<th class="td-action"></th>
|
|
|
<th class="td-action"></th>
|
|
|
</tr>
|
|
|
## USERS
|
|
|
%for _user in c.user_group.permissions():
|
|
|
## super admin/owner row
|
|
|
%if getattr(_user, 'admin_row', None) or getattr(_user, 'owner_row', None):
|
|
|
<tr class="perm_admin_row">
|
|
|
<td class="td-radio">${h.radio('admin_perm_%s' % _user.user_id,'repository.none', disabled="disabled")}</td>
|
|
|
<td class="td-radio">${h.radio('admin_perm_%s' % _user.user_id,'repository.read', disabled="disabled")}</td>
|
|
|
<td class="td-radio">${h.radio('admin_perm_%s' % _user.user_id,'repository.write', disabled="disabled")}</td>
|
|
|
<td class="td-radio">${h.radio('admin_perm_%s' % _user.user_id,'repository.admin', 'repository.admin', disabled="disabled")}</td>
|
|
|
<td class="td-user">
|
|
|
${base.gravatar(_user.email, 16, user=_user, tooltip=True)}
|
|
|
<span class="user">
|
|
|
${h.link_to_user(_user.username)}
|
|
|
%if getattr(_user, 'admin_row', None):
|
|
|
(${_('super-admin')})
|
|
|
%endif
|
|
|
%if getattr(_user, 'owner_row', None):
|
|
|
(${_('owner')})
|
|
|
%endif
|
|
|
</span>
|
|
|
</td>
|
|
|
<td></td>
|
|
|
<td class="quick_repo_menu">
|
|
|
% if c.rhodecode_user.is_admin:
|
|
|
<i class="icon-more"></i>
|
|
|
<div class="menu_items_container" style="display: none;">
|
|
|
<ul class="menu_items">
|
|
|
<li>
|
|
|
${h.link_to('show permissions', h.route_path('edit_user_perms_summary', user_id=_user.user_id, _anchor='user-groups-permissions'))}
|
|
|
</li>
|
|
|
</ul>
|
|
|
</div>
|
|
|
% endif
|
|
|
</td>
|
|
|
</tr>
|
|
|
%else:
|
|
|
##forbid revoking permission from yourself, except if you're an super admin
|
|
|
<tr>
|
|
|
%if c.rhodecode_user.user_id != _user.user_id or c.rhodecode_user.is_admin:
|
|
|
<td class="td-radio">${h.radio('u_perm_%s' % _user.user_id,'usergroup.none')}</td>
|
|
|
<td class="td-radio">${h.radio('u_perm_%s' % _user.user_id,'usergroup.read')}</td>
|
|
|
<td class="td-radio">${h.radio('u_perm_%s' % _user.user_id,'usergroup.write')}</td>
|
|
|
<td class="td-radio">${h.radio('u_perm_%s' % _user.user_id,'usergroup.admin')}</td>
|
|
|
<td class="td-user">
|
|
|
${base.gravatar(_user.email, 16, user=_user, tooltip=True)}
|
|
|
<span class="user">
|
|
|
% if _user.username == h.DEFAULT_USER:
|
|
|
${h.DEFAULT_USER}
|
|
|
% if _user.active:
|
|
|
<span class="user-perm-help-text"> - ${_('permission for other logged in and anonymous users')}</span>
|
|
|
% else:
|
|
|
<span class="user-perm-help-text"> - ${_('permission for other logged in users')}</span>
|
|
|
% endif
|
|
|
% else:
|
|
|
% if getattr(_user, 'duplicate_perm', None):
|
|
|
<span class="user-perm-duplicate">
|
|
|
${h.link_to_user(_user.username)}
|
|
|
<span class="tooltip" title="${_('This entry is a duplicate, most probably left-over from previously set permission. This user has a higher permission set, so this entry is inactive. Please revoke this permission manually.')}">(${_('inactive duplicate')})
|
|
|
</span>
|
|
|
</span>
|
|
|
% else:
|
|
|
${h.link_to_user(_user.username)}
|
|
|
% endif
|
|
|
% endif
|
|
|
</span>
|
|
|
</td>
|
|
|
<td class="td-action">
|
|
|
%if _user.username != h.DEFAULT_USER:
|
|
|
<span class="btn btn-link btn-danger revoke_perm"
|
|
|
member="${_user.user_id}" member_type="user">
|
|
|
${_('Remove')}
|
|
|
</span>
|
|
|
%endif
|
|
|
</td>
|
|
|
<td class="quick_repo_menu">
|
|
|
% if c.rhodecode_user.is_admin:
|
|
|
<i class="icon-more"></i>
|
|
|
<div class="menu_items_container" style="display: none;">
|
|
|
<ul class="menu_items">
|
|
|
<li>
|
|
|
% if _user.username == h.DEFAULT_USER:
|
|
|
${h.link_to('show permissions', h.route_path('admin_permissions_overview', _anchor='user-groups-permissions'))}
|
|
|
% else:
|
|
|
${h.link_to('show permissions', h.route_path('edit_user_perms_summary', user_id=_user.user_id, _anchor='user-groups-permissions'))}
|
|
|
% endif
|
|
|
</li>
|
|
|
</ul>
|
|
|
</div>
|
|
|
% endif
|
|
|
</td>
|
|
|
%else:
|
|
|
## special case for currently logged-in user permissions, we make sure he cannot take his own permissions
|
|
|
<td class="td-radio">${h.radio('u_perm_%s' % _user.user_id,'usergroup.none', disabled="disabled")}</td>
|
|
|
<td class="td-radio">${h.radio('u_perm_%s' % _user.user_id,'usergroup.read', disabled="disabled")}</td>
|
|
|
<td class="td-radio">${h.radio('u_perm_%s' % _user.user_id,'usergroup.write', disabled="disabled")}</td>
|
|
|
<td class="td-radio">${h.radio('u_perm_%s' % _user.user_id,'usergroup.admin', disabled="disabled")}</td>
|
|
|
<td class="td-user">
|
|
|
${base.gravatar(_user.email, 16, user=_user, tooltip=True)}
|
|
|
<span class="user">
|
|
|
% if _user.username == h.DEFAULT_USER:
|
|
|
${h.DEFAULT_USER}
|
|
|
% if _user.active:
|
|
|
<span class="user-perm-help-text"> - ${_('permission for other logged in and anonymous users')}</span>
|
|
|
% else:
|
|
|
<span class="user-perm-help-text"> - ${_('permission for other logged in users')}</span>
|
|
|
% endif
|
|
|
% else:
|
|
|
% if getattr(_user, 'duplicate_perm', None):
|
|
|
<span class="user-perm-duplicate">
|
|
|
${h.link_to_user(_user.username)}
|
|
|
<span class="tooltip" title="${_('This entry is a duplicate, most probably left-over from previously set permission. This user has a higher permission set, so this entry is inactive. Please revoke this permission manually.')}">(${_('inactive duplicate')})
|
|
|
</span>
|
|
|
</span>
|
|
|
% else:
|
|
|
${h.link_to_user(_user.username)}
|
|
|
% endif
|
|
|
% endif
|
|
|
<span class="user-perm-help-text">(${_('delegated admin')})</span>
|
|
|
</span>
|
|
|
</td>
|
|
|
<td></td>
|
|
|
<td class="quick_repo_menu">
|
|
|
% if c.rhodecode_user.is_admin:
|
|
|
<i class="icon-more"></i>
|
|
|
<div class="menu_items_container" style="display: none;">
|
|
|
<ul class="menu_items">
|
|
|
<li>
|
|
|
${h.link_to('show permissions', h.route_path('edit_user_perms_summary', user_id=_user.user_id, _anchor='user-groups-permissions'))}
|
|
|
</li>
|
|
|
</ul>
|
|
|
</div>
|
|
|
% endif
|
|
|
</td>
|
|
|
%endif
|
|
|
</tr>
|
|
|
%endif
|
|
|
%endfor
|
|
|
|
|
|
## USER GROUPS
|
|
|
%for _user_group in c.user_group.permission_user_groups(with_members=True):
|
|
|
<tr>
|
|
|
<td class="td-radio">${h.radio('g_perm_%s' % _user_group.users_group_id,'usergroup.none')}</td>
|
|
|
<td class="td-radio">${h.radio('g_perm_%s' % _user_group.users_group_id,'usergroup.read')}</td>
|
|
|
<td class="td-radio">${h.radio('g_perm_%s' % _user_group.users_group_id,'usergroup.write')}</td>
|
|
|
<td class="td-radio">${h.radio('g_perm_%s' % _user_group.users_group_id,'usergroup.admin')}</td>
|
|
|
<td class="td-user">
|
|
|
<i class="icon-user-group"></i>
|
|
|
%if c.is_super_admin:
|
|
|
<a href="${h.route_path('edit_user_group',user_group_id=_user_group.users_group_id)}">
|
|
|
${_user_group.users_group_name}
|
|
|
</a>
|
|
|
%else:
|
|
|
${h.link_to_group(_user_group.users_group_name)}
|
|
|
%endif
|
|
|
(${_('members')}: ${len(_user_group.members)})
|
|
|
</td>
|
|
|
<td class="td-action">
|
|
|
<span class="btn btn-link btn-danger revoke_perm"
|
|
|
member="${_user_group.users_group_id}" member_type="user_group">
|
|
|
${_('Remove')}
|
|
|
</span>
|
|
|
</td>
|
|
|
<td class="quick_repo_menu">
|
|
|
% if c.rhodecode_user.is_admin:
|
|
|
<i class="icon-more"></i>
|
|
|
<div class="menu_items_container" style="display: none;">
|
|
|
<ul class="menu_items">
|
|
|
<li>
|
|
|
${h.link_to('show permissions', h.route_path('edit_user_group_perms_summary', user_group_id=_user_group.users_group_id, _anchor='user-groups-permissions'))}
|
|
|
</li>
|
|
|
</ul>
|
|
|
</div>
|
|
|
% endif
|
|
|
</td>
|
|
|
</tr>
|
|
|
%endfor
|
|
|
<tr class="new_members" id="add_perm_input"></tr>
|
|
|
<tr>
|
|
|
<td></td>
|
|
|
<td></td>
|
|
|
<td></td>
|
|
|
<td></td>
|
|
|
<td></td>
|
|
|
<td>
|
|
|
<span id="add_perm" class="link">
|
|
|
${_('Add user/user group')}
|
|
|
</span>
|
|
|
</td>
|
|
|
<td></td>
|
|
|
</tr>
|
|
|
</table>
|
|
|
|
|
|
<div class="buttons">
|
|
|
${h.submit('save',_('Save'),class_="btn btn-primary")}
|
|
|
${h.reset('reset',_('Reset'),class_="btn btn-danger")}
|
|
|
</div>
|
|
|
${h.end_form()}
|
|
|
</div>
|
|
|
</div>
|
|
|
|
|
|
<script type="text/javascript">
|
|
|
$('#add_perm').on('click', function(e){
|
|
|
addNewPermInput($(this), 'usergroup');
|
|
|
});
|
|
|
$('.revoke_perm').on('click', function(e){
|
|
|
markRevokePermInput($(this), 'usergroup');
|
|
|
});
|
|
|
quick_repo_menu()
|
|
|
</script>
|
|
|
|
