<.admin_page_header back={PhoenixKit.Utils.Routes.path("/admin/users")} title={gettext("Role Management")} subtitle={gettext("Create and manage user roles")} /> <%!-- Action Button --%>
<%!-- Create Role Modal --%> <.modal show={@show_create_form} on_close="hide_form" max_width="2xl"> <:title>{gettext("Create New Role")}
<.input field={@create_role_form[:name]} label={gettext("Role Name *")} placeholder={gettext("Enter role name (e.g., Manager, Editor)")} maxlength="50" required />

{gettext("Must be unique, 1-50 characters.")}

<.textarea field={@create_role_form[:description]} label={gettext("Description")} placeholder={gettext("Describe what this role can do (optional)")} maxlength="500" />

{gettext("Optional, up to 500 characters.")}

<:actions> <%!-- Edit Role Modal --%> <.modal show={@show_edit_form} on_close="hide_form" max_width="2xl"> <:title>{gettext("Edit Role")}
<.input field={@edit_role_form[:name]} label={gettext("Role Name *")} placeholder={gettext("Enter role name (e.g., Manager, Editor)")} maxlength="50" required />

{gettext("Must be unique, 1-50 characters.")}

<.textarea field={@edit_role_form[:description]} label={gettext("Description")} placeholder={gettext("Describe what this role can do (optional)")} maxlength="500" />

{gettext("Optional, up to 500 characters.")}

<:actions> <%!-- Roles List --%>
<%= if length(@roles) > 0 do %> <.table_default id="roles-table" variant="zebra" toggleable={true} items={@roles} card_fields={ fn role -> [ %{ label: gettext("Type"), value: if(role.is_system_role, do: gettext("System"), else: gettext("Custom")) }, %{label: gettext("Users"), value: Map.get(@role_stats, role.name, 0)}, %{label: gettext("Description"), value: role.description || gettext("—")} ] end } > <:card_header :let={role}>
<.role_badge role={role} /> <%= if role.is_system_role do %> {gettext("System")} <% else %> {gettext("Custom")} <% end %>
<:card_actions :let={role}> <.table_row_menu id={"role-card-menu-#{role.uuid}"} label={gettext("Role actions")}> <%= if !role.is_system_role do %> <.table_row_menu_button phx-click="show_edit_role" phx-value-role_uuid={role.uuid} icon="hero-pencil" label={gettext("Edit")} variant="primary" /> <.table_row_menu_divider /> <.table_row_menu_button phx-click="request_delete_role" phx-value-role_uuid={role.uuid} phx-value-role_name={role.name} icon="hero-trash" label={gettext("Delete")} variant="error" /> <% else %>
  • {gettext("Protected")}
    • <% end %> <%= if @can_manage_permissions && !MapSet.member?(@uneditable_role_uuids, to_string(role.uuid)) do %> <.table_row_menu_divider /> <.table_row_menu_button phx-click="show_permissions_editor" phx-value-role_uuid={role.uuid} icon="hero-key" label={gettext("Permissions")} variant="secondary" /> <% end %> <.table_default_header> <.table_default_row> <.table_default_header_cell>{gettext("Role")} <.table_default_header_cell>{gettext("Type")} <.table_default_header_cell>{gettext("Description")} <.table_default_header_cell>{gettext("Users")} <.table_default_header_cell>{gettext("Actions")} <.table_default_body> <%= for role <- @roles do %> <.table_default_row> <.table_default_cell>
    <.role_badge role={role} />
    <.table_default_cell> <%= if role.is_system_role do %> {gettext("System Role")} <% else %> {gettext("Custom Role")} <% end %> <.table_default_cell class="max-w-xs">
    <%= if role.description do %> {role.description} <% else %> {gettext("No description")} <% end %>
    <.table_default_cell>
    <.users_count role={role} stats={@role_stats} /> {gettext("users")}
    <.table_default_cell> <.table_row_menu id={"role-menu-#{role.uuid}"} label={gettext("Role actions")}> <%= if !role.is_system_role do %> <.table_row_menu_button phx-click="show_edit_role" phx-value-role_uuid={role.uuid} icon="hero-pencil" label={gettext("Edit")} variant="primary" /> <.table_row_menu_divider /> <.table_row_menu_button phx-click="request_delete_role" phx-value-role_uuid={role.uuid} phx-value-role_name={role.name} icon="hero-trash" label={gettext("Delete")} variant="error" /> <% else %>
  • {gettext("Protected")}
    • <% end %> <%= if @can_manage_permissions && !MapSet.member?(@uneditable_role_uuids, to_string(role.uuid)) do %> <.table_row_menu_divider /> <.table_row_menu_button phx-click="show_permissions_editor" phx-value-role_uuid={role.uuid} icon="hero-key" label={gettext("Permissions")} variant="secondary" /> <% end %> <% end %> <% else %> <%!-- Empty state --%>
    <.icon name="hero-shield-check" class="h-16 w-16 mx-auto text-base-content/40 mb-4" />

    {gettext("No roles found")}

    {gettext("Start by creating your first custom role.")}

    <% end %>
    <%!-- Role Statistics --%>

    {gettext("Role Statistics")}

    <%!-- System Roles Count --%> <:icon> <.icon name="hero-lock-closed" class="w-5 h-5" /> <%!-- Custom Roles Count --%> <:icon> <.icon name="hero-cog-6-tooth" class="w-5 h-5" /> <%!-- Total Roles Count --%> <:icon> <.icon name="hero-chart-bar" class="w-5 h-5" />
    <%!-- Delete Confirmation Modal --%> <.confirm_modal show={assigns[:delete_confirmation] && @delete_confirmation.show} on_confirm="confirm_delete_role" on_cancel="cancel_delete" title={gettext("Delete Role")} title_icon="hero-trash" danger={true} messages={[ {:warning, gettext( "Are you sure you want to delete the role \"%{role_name}\"? This action cannot be undone.", role_name: Map.get(@delete_confirmation, :role_name, "") )} ]} confirm_text={gettext("Delete Role")} /> <%!-- Permissions Editor Modal --%> <.modal show={@show_permissions_editor && @permissions_role != nil} on_close="hide_permissions_editor" max_width="3xl" > <:title> {gettext("Permissions for")} <.role_badge role={@permissions_role || %{name: "", is_system_role: false}} />

    {gettext( "Select which sections and modules this role can access. You can only grant permissions that your own role has." )}

    <%!-- Quick Actions --%>
    <%!-- Core Sections --%>

    {gettext("Core Sections")}

    <%= for key <- PhoenixKit.Users.Permissions.core_section_keys(), MapSet.member?(@permissions_grantable_keys, key) do %> <% end %>
    <%!-- Feature Modules --%>

    {gettext("Feature Modules")}

    <%= for key <- PhoenixKit.Users.Permissions.feature_module_keys(), MapSet.member?(@permissions_grantable_keys, key) do %> <% end %>
    <%!-- Custom (permission keys registered by parent app) --%> <%= if length(PhoenixKit.Users.Permissions.custom_keys()) > 0 do %>

    {gettext("Custom")}

    <%= for key <- PhoenixKit.Users.Permissions.custom_keys(), MapSet.member?(@permissions_grantable_keys, key) do %> <% end %>
    <% end %> <%!-- Summary --%>
    {gettext("%{granted} of %{total} manageable permissions granted", granted: MapSet.size(@permissions_role_keys), total: MapSet.size(@permissions_grantable_keys) )} <%= if MapSet.size(@permissions_preserved_keys) > 0 do %> {gettext("(%{count} for disabled modules, preserved on save)", count: MapSet.size(@permissions_preserved_keys) )} <% end %>
    <:actions>