{% extends "base.html" %}
{% block title %}Users{% endblock %}
{% block content %}
<div class="pagehead">
  <div><h1>Users</h1><p>Students sign in with their Student ID. Passwords are never shown again after creation, so use Reset if one is lost.</p></div>
  <div class="row">
    <a class="btn" href="{{ url_for('admin_students_bulk') }}">Import students</a>
    <a class="btn primary" href="{{ url_for('admin_user_new') }}">Add account</a>
  </div>
</div>

<form class="card row" method="get">
  <div style="flex:1;min-width:200px"><input type="search" name="q" value="{{ term }}" placeholder="Search name, ID or class"></div>
  <div>
    <select name="role" onchange="this.form.submit()">
      <option value="">All roles</option>
      {% for r in ['student','teacher','admin'] %}<option value="{{ r }}" {{ 'selected' if role == r }}>{{ r|capitalize }}s</option>{% endfor %}
    </select>
  </div>
  <button class="btn">Search</button>
</form>

<div class="card">
  <div class="tablewrap"><table>
    <tr><th>ID / username</th><th>Name</th><th>Role</th><th>Class</th><th>Status</th><th></th></tr>
    {% for u in users %}
    <tr>
      <td><b>{{ u.username }}</b></td>
      <td>{{ u.full_name }}</td>
      <td>{{ u.role }}</td>
      <td>{{ u.class_name or '-' }}</td>
      <td>{% if u.status == 'active' %}<span class="badge ok">Active</span>{% elif u.status == 'pending' %}<span class="badge warn">Pending</span>{% elif u.lock_note %}<span class="badge bad" title="{{ u.lock_note }}">Locked (left exam)</span>{% else %}<span class="badge bad">Disabled</span>{% endif %}</td>
      <td class="actions">
        {% if u.status == 'pending' %}
          <form class="inline" method="post" action="{{ url_for('admin_user_action', uid=u.id, action='approve') }}"><input type="hidden" name="_csrf" value="{{ csrf_token() }}"><button class="btn sm primary">Approve</button></form>
        {% endif %}
        <form class="inline" method="post" action="{{ url_for('admin_user_action', uid=u.id, action='reset') }}" onsubmit="return confirm('Reset the password for {{ u.full_name|e }}?')"><input type="hidden" name="_csrf" value="{{ csrf_token() }}"><button class="btn sm">Reset password</button></form>
        {% if u.id != g.user.id %}
          {% if u.status == 'disabled' %}
            <form class="inline" method="post" action="{{ url_for('admin_user_action', uid=u.id, action='enable') }}"><input type="hidden" name="_csrf" value="{{ csrf_token() }}"><button class="btn sm">{{ 'Unlock' if u.lock_note else 'Enable' }}</button></form>
          {% elif u.status == 'active' %}
            <form class="inline" method="post" action="{{ url_for('admin_user_action', uid=u.id, action='disable') }}"><input type="hidden" name="_csrf" value="{{ csrf_token() }}"><button class="btn sm">Disable</button></form>
          {% endif %}
          <form class="inline" method="post" action="{{ url_for('admin_user_action', uid=u.id, action='delete') }}" onsubmit="return confirm('Delete {{ u.full_name|e }}? Their exams and results are deleted too.')"><input type="hidden" name="_csrf" value="{{ csrf_token() }}"><button class="btn sm danger">Delete</button></form>
        {% endif %}
      </td>
    </tr>
    {% else %}
    <tr><td colspan="6" class="muted">No users match.</td></tr>
    {% endfor %}
  </table></div>
</div>
{% endblock %}