@extends('platform::layout')
@section('title','Usuarios y permisos')
@section('content')<div><p class="eyebrow">Administración de acceso</p><h1 class="mt-2">Usuarios, roles y permisos</h1><p class="muted mt-3">Conceda únicamente el acceso necesario. Los permisos se comprueban en el servidor.</p></div>
<section class="card"><h2 class="mb-5">Crear usuario</h2><form class="grid md:grid-cols-2 lg:grid-cols-5 gap-4 items-end" method="post" action="/access/users">@csrf<div><label for="new-name">Nombre</label><input id="new-name" name="name" required maxlength="150"></div><div><label for="new-email">Correo</label><input id="new-email" type="email" name="email" required></div><div><label for="new-password">Contraseña inicial</label><input id="new-password" type="password" name="password" required minlength="12" autocomplete="new-password"></div><div><label for="new-confirm">Repetir contraseña</label><input id="new-confirm" type="password" name="password_confirmation" required autocomplete="new-password"></div><button class="btn">Crear usuario</button></form></section>
<section class="space-y-4"><h2>Usuarios registrados</h2>@foreach($users as $u)<article class="card"><div class="flex flex-wrap justify-between gap-3 mb-4"><div><h2>{{ $u->name }}</h2><p class="muted">{{ $u->email }}</p></div><span class="badge">{{ $u->is_owner?'Propietario protegido':($u->is_active?'Activo':'Deshabilitado') }}</span></div>@if(!$u->is_owner&&$u->id!==auth()->id())<details><summary>Administrar acceso</summary><form method="post" action="/access/users/{{ $u->id }}" class="mt-5 space-y-5">@csrf @method('PUT')<div class="grid md:grid-cols-2 gap-4"><div><label for="u-name-{{ $u->id }}">Nombre</label><input id="u-name-{{ $u->id }}" name="name" value="{{ $u->name }}" required></div><div><label for="u-active-{{ $u->id }}">Estado</label><select id="u-active-{{ $u->id }}" name="active"><option value="1" @selected($u->is_active)>Activo</option><option value="0" @selected(!$u->is_active)>Deshabilitado</option></select></div></div><fieldset><legend class="mb-3 text-sm font-semibold">Roles</legend><div class="flex flex-wrap gap-4">@foreach($roles as $role)<label class="flex items-center gap-2"><input type="checkbox" name="roles[]" value="{{ $role->id }}" @checked($u->roles->contains($role->id))>{{ $role->label }}</label>@endforeach</div></fieldset><fieldset><legend class="mb-3 text-sm font-semibold">Permisos directos</legend><div class="grid md:grid-cols-3 gap-3">@foreach($permissions as $p)<label class="flex items-center gap-2"><input type="checkbox" name="permissions[]" value="{{ $p->id }}" @checked($u->permissions->contains($p->id))>{{ $p->label }}</label>@endforeach</div></fieldset><button class="btn">Guardar acceso</button></form></details>@endif</article>@endforeach{{ $users->links() }}</section>
<div class="grid lg:grid-cols-2 gap-6"><section class="card"><h2 class="mb-5">Crear rol</h2><form class="space-y-4" method="post" action="/access/roles">@csrf<label>Identificador<input name="name" placeholder="operador" required></label><label>Nombre visible<input name="label" required></label><fieldset><legend class="text-sm font-semibold mb-3">Permisos del rol</legend>@foreach($permissions as $p)<label class="flex items-center gap-2"><input type="checkbox" name="permissions[]" value="{{ $p->id }}">{{ $p->label }}</label>@endforeach</fieldset><button class="btn">Crear rol</button></form></section><section class="card"><h2 class="mb-3">Crear permiso personalizado</h2><p class="muted mb-5">Crear un permiso no añade una función. Su módulo debe comprobarlo mediante una Policy o Gate.</p><form class="space-y-4" method="post" action="/access/permissions">@csrf<label>Identificador<input name="name" placeholder="custom.inventario.aprobar" required></label><label>Descripción<input name="label" required></label><button class="btn-secondary">Crear permiso</button></form></section></div>
<section class="card"><h2 class="mb-5">Roles existentes</h2><div class="grid lg:grid-cols-2 gap-6">@foreach($roles as $role)<details class="rounded-xl border border-slate-200 p-4"><summary>{{ $role->label }} · {{ $role->name }}</summary><form method="post" action="/access/roles/{{ $role->id }}" class="mt-4 space-y-4">@csrf @method('PUT')<label>Nombre visible<input name="label" value="{{ $role->label }}" required></label>@foreach($permissions as $p)<label class="flex gap-2 items-center"><input type="checkbox" name="permissions[]" value="{{ $p->id }}" @checked($role->permissions->contains($p->id))>{{ $p->label }}</label>@endforeach<button class="btn-secondary">Actualizar rol</button></form></details>@endforeach</div></section>
@endsection