<webscript>
  <shortname>permissions</shortname>
  <description>Document/Folder permissions module primarily for Document Library</description>
  <url>/modules/documentlibrary/permissions</url>
</webscript>

<script type="text/javascript">//<![CDATA[
   Alfresco.util.ComponentManager.find(
   {
      id: "${args.htmlid}"
   })[0].setOptions(
   {
      roles:
      {
         <#list siteRoles as siteRole>"${siteRole}": true<#if siteRole_has_next>,</#if></#list>
      }
   }).setMessages(
      ${messages}
   );
//]]></script>
<div id="${args.htmlid}-dialog" class="permissions">
   <div id="${args.htmlid}-title" class="hd"></div>
   <div class="bd">
      <p/>
      <div class="yui-g">
         <h2>${msg("header.manage")}</h2>
      </div>
      <div class="groups">
<#list groupNames as group>
         <div class="yui-gd">
            <div class="yui-u first right"><label>${msg("group." + group)} ${msg("label.have")}</label></div>
            <div class="yui-u flat-button">
               <button id="${args.htmlid}-${group?lower_case}" value="${permissionGroups[group_index]}" class="site-group"></button>
               <select id="${args.htmlid}-${group?lower_case}-select">
   <#list siteRoles as siteRole>
                  <option value="${siteRole}">${msg("role." + siteRole)}</option>
   </#list>
               </select>
            </div>
         </div>
</#list>
      </div>
      <div class="actions">
         <div class="yui-gd">
            <div class="yui-u first reset-btn">
               <button id="${args.htmlid}-reset-all">${msg("label.reset-all")}</button>
            </div>
            <div class="yui-u">
               <label>${msg("label.mangerdefaults")}</label>
            </div>
         </div>
      </div>
      <p/>
      <div class="bdft">
         <input type="button" id="${args.htmlid}-ok" value="${msg("button.save")}" tabindex="6" />
         <input type="button" id="${args.htmlid}-cancel" value="${msg("button.cancel")}" tabindex="7" />
      </div>
   </div>
</div>

var json = remote.call("/api/sites/" + args.site + "/roles");
var roles = eval('(' + json + ')');

var groupNames = [];
var permGroups = [];
var permissionGroups = roles.permissionGroups;
for (group in permissionGroups)
{
   // strip group name down to group identifier
   var permissionGroup = permissionGroups[group];
   var groupName = permissionGroup.substring(permissionGroup.lastIndexOf("_") + 1);
   
   // ignore the SiteManager group as we do not allow it to be modified
   if (groupName != "SiteManager")
   {
      groupNames.push(groupName);
      permGroups.push(permissionGroup);
   }
}

var roleNames = [];
var siteRoles = roles.siteRoles;
for (role in siteRoles)
{
   var roleName = siteRoles[role];
   
   // ignore the SiteManager role as we do not allow it to be applied
   if (roleName != "SiteManager")
   {
      roleNames.push(roleName);
   }
}

model.siteRoles = roleNames;
model.permissionGroups = permGroups;
model.groupNames = groupNames;

## Titles
title.single=Manage Permissions for {0}
title.multi=Manage Permissions for {0} items
header.manage=Groups and Privileges

## Labels
label.reset-all=Use Defaults
label.have=have
label.mangerdefaults=Note: Site Managers always have full privileges.

## Messages
message.permissions.success=Permissions on {0} items updated successfully
message.permissions.failure=Could not update permissions

## Groups
group.SiteConsumer=Consumers
group.SiteCollaborator=Collaborators
group.SiteContributor=Contributors
group.SiteManager=Site Managers
group.EVERYONE=All Other Users

## Roles
role.None=No privileges
role.SiteManager=Manager privileges
role.SiteContributor=Contributor privileges
role.SiteCollaborator=Collaborator privileges
role.SiteConsumer=Consumer privileges