{% extends "base.html" %}
{% block title %}Admin Permissions{% endblock %}
{% block nav_permissions %}active{% endblock %}

{% block content %}
<div class="page-header">
    <div>
        <h2><i class="fa-solid fa-shield-halved me-2"></i>Admin Permissions</h2>
        <p class="text-muted mb-0">Control which portal modules each admin user can access.</p>
    </div>
</div>

<div class="portal-card">
    <div class="portal-card-body p-0">
        <div class="table-responsive">
            <table class="table table-hover align-middle mb-0">
                <thead>
                    <tr>
                        <th>Admin User</th>
                        <th>Email</th>
                        <th>Access Mode</th>
                        <th>Modules Configured</th>
                        <th>Action</th>
                    </tr>
                </thead>
                <tbody>
                    {% for row in user_data %}
                    <tr>
                        <td>
                            <div class="fw-semibold">{{ row.user.get_full_name }}</div>
                        </td>
                        <td class="small text-muted">{{ row.user.email }}</td>
                        <td>
                            {% if row.is_restricted %}
                            <span class="badge bg-warning text-dark">
                                <i class="fa-solid fa-lock me-1"></i>Restricted
                            </span>
                            {% else %}
                            <span class="badge bg-success">
                                <i class="fa-solid fa-unlock me-1"></i>Full Access
                            </span>
                            {% endif %}
                        </td>
                        <td class="small">
                            {% if row.is_restricted %}
                                {{ row.perm_count }} / {{ total_modules }} modules configured
                            {% else %}
                                <span class="text-muted">All modules (unrestricted)</span>
                            {% endif %}
                        </td>
                        <td>
                            <a href="{% url 'portal:admin_permissions_edit' row.user.pk %}"
                               class="btn btn-sm btn-outline-primary">
                                <i class="fa-solid fa-sliders me-1"></i> Manage
                            </a>
                        </td>
                    </tr>
                    {% empty %}
                    <tr>
                        <td colspan="5" class="text-center text-muted py-5">
                            <i class="fa-solid fa-users-slash fa-2x mb-2 d-block"></i>
                            No admin users found. Create an admin account first.
                        </td>
                    </tr>
                    {% endfor %}
                </tbody>
            </table>
        </div>
    </div>
</div>

<div class="alert alert-info mt-4 small">
    <i class="fa-solid fa-circle-info me-2"></i>
    <strong>How it works:</strong>
    By default, admin users have <strong>full access</strong> to all modules.
    Once you configure restrictions for a user, they can only access the modules and actions you explicitly allow.
    Super Admins always have full access and are not shown here.
</div>
{% endblock %}