<%!-- Header Section --%>
<%!-- Back Button (Left aligned) --%> <.link navigate={PhoenixKit.Utils.Routes.path("/admin")} class="btn btn-outline btn-primary btn-sm absolute left-0 top-0 -mb-12" > <.icon name="hero-arrow-left" class="w-4 h-4 mr-2" /> Back to Dashboard <%!-- Title Section --%>

Role Management

Create and manage user roles

<%!-- Action Button --%>
<%!-- Create Role Modal --%> <.modal show={@show_create_form} on_close="hide_form" max_width="2xl"> <:title>Create New Role
<.input field={@create_role_form[:name]} label="Role Name *" placeholder="Enter role name (e.g., Manager, Editor)" maxlength="50" required />

Must be unique, 1-50 characters.

<.textarea field={@create_role_form[:description]} label="Description" placeholder="Describe what this role can do (optional)" maxlength="500" />

Optional, up to 500 characters.

<:actions> <%!-- Edit Role Modal --%> <.modal show={@show_edit_form} on_close="hide_form" max_width="2xl"> <:title>Edit Role
<.input field={@edit_role_form[:name]} label="Role Name *" placeholder="Enter role name (e.g., Manager, Editor)" maxlength="50" required />

Must be unique, 1-50 characters.

<.textarea field={@edit_role_form[:description]} label="Description" placeholder="Describe what this role can do (optional)" maxlength="500" />

Optional, up to 500 characters.

<:actions> <%!-- Roles List --%>
<%= if length(@roles) > 0 do %> <.table_default variant="zebra"> <.table_default_header> <.table_default_row> <.table_default_header_cell>Role <.table_default_header_cell>Type <.table_default_header_cell>Description <.table_default_header_cell>Users <.table_default_header_cell>Actions <.table_default_body> <%= for role <- @roles do %> <.table_default_row> <.table_default_cell>
<.role_badge role={role} />
<.table_default_cell> <%= if role.is_system_role do %> System Role <% else %> Custom Role <% end %> <.table_default_cell class="max-w-xs">
<%= if role.description do %> {role.description} <% else %> No description <% end %>
<.table_default_cell>
<.users_count role={role} stats={@role_stats} /> users
<.table_default_cell>
<%= if !role.is_system_role do %> <%!-- Edit Button --%> <%!-- Delete Button --%> <% else %> Protected <% end %> <%!-- Permissions Button (users permission required, not for Owner role) --%> <%= if assigns[:phoenix_kit_current_scope] && PhoenixKit.Users.Auth.Scope.has_module_access?(assigns[:phoenix_kit_current_scope], "users") && role.name != "Owner" do %> <% end %>
<% end %> <% else %> <%!-- Empty state --%>
<.icon name="hero-shield-check" class="h-16 w-16 mx-auto text-base-content/40 mb-4" />

No roles found

Start by creating your first custom role.

<% end %>
<%!-- Role Statistics --%>

Role Statistics

<%!-- System Roles Count --%> <:icon> <.icon name="hero-lock-closed" class="w-5 h-5" /> <%!-- Custom Roles Count --%> <:icon> <.icon name="hero-cog-6-tooth" class="w-5 h-5" /> <%!-- Total Roles Count --%> <:icon> <.icon name="hero-chart-bar" class="w-5 h-5" />
<%!-- Delete Confirmation Modal --%> <.confirm_modal show={assigns[:delete_confirmation] && @delete_confirmation.show} on_confirm="confirm_delete_role" on_cancel="cancel_delete" title="Delete Role" title_icon="hero-trash" danger={true} messages={[ {:warning, "Are you sure you want to delete the role \"#{Map.get(@delete_confirmation, :role_name, "")}\"? This action cannot be undone."} ]} confirm_text="Delete Role" /> <%!-- Permissions Editor Modal --%> <.modal show={@show_permissions_editor && @permissions_role != nil} on_close="hide_permissions_editor" max_width="3xl" > <:title> Permissions for <.role_badge role={@permissions_role || %{name: "", is_system_role: false}} />

Select which sections and modules this role can access. You can only grant permissions that your own role has.

<%!-- Quick Actions --%>
<%!-- Core Sections --%>

Core Sections

<%= for key <- PhoenixKit.Users.Permissions.core_section_keys(), MapSet.member?(@permissions_grantable_keys, key) do %> <% end %>
<%!-- Feature Modules --%>

Feature Modules

<%= for key <- PhoenixKit.Users.Permissions.feature_module_keys(), MapSet.member?(@permissions_grantable_keys, key) do %> <% end %>
<%!-- Summary --%>
{MapSet.size(@permissions_role_keys)} of {MapSet.size(@permissions_grantable_keys)} manageable permissions granted <%= if MapSet.size(@permissions_preserved_keys) > 0 do %> ({MapSet.size(@permissions_preserved_keys)} for disabled modules, preserved on save) <% end %>
<:actions>