{{define "content"}}
<h1>{{if .IsEdit}}Edit user{{else}}Create user{{end}}</h1>

{{template "back_link" (back "/users" "Back to users")}}

<div class="card narrow">
  {{if .Error}}<p class="error">{{.Error}}</p>{{end}}
  <form method="post" action="{{if .IsEdit}}/users/{{.UserID}}{{else}}/users/new{{end}}">
    <label for="username">Username</label>
    <input id="username" name="username" autocomplete="username"
           autocapitalize="none" spellcheck="false" value="{{.FormUsername}}" required>

    <label for="password">Password{{if .IsEdit}} (leave empty to keep){{end}}</label>
    <input id="password" name="password" type="password" autocomplete="new-password" {{if not .IsEdit}}required{{end}}>

    <label for="role">Role</label>
    {{if .LastGlobalLocked}}<input type="hidden" name="role" value="{{.FormRole}}">{{end}}
    <select id="role" name="role" data-global-role="{{.GlobalRole}}"{{if .LastGlobalLocked}} disabled{{end}}>
      <option value="domain" {{if eq .FormRole "domain"}}selected{{end}}>Domain administrator</option>
      <option value="global" {{if eq .FormRole "global"}}selected{{end}}>Global administrator</option>
    </select>
    {{if .LastGlobalLocked}}<p class="muted">The only global administrator cannot be demoted.</p>{{end}}

    {{/* Outbound and inbound domains are assigned separately; a domain
         administrator needs at least one on either list. "All" also covers
         domains added later — with it ticked the rows below are ignored. */}}
    <div id="domain-pick" data-domain-pick>
    <fieldset>
      <legend>Outbound domains</legend>
      <p class="muted">A domain administrator needs at least one outbound or inbound domain.</p>
      <label class="check">
        <input type="checkbox" name="all_domains" value="1" {{if .FormAllDomains}}checked{{end}}>
        All, including domains added later
      </label>
      {{range .Domains}}
      <label class="check">
        <input type="checkbox" name="domain_ids" value="{{.ID}}" {{if index $.FormDomains .ID}}checked{{end}}>
        {{.Name}}
      </label>
      {{end}}
    </fieldset>
    {{if .InboundEnabled}}
    <fieldset>
      <legend>Inbound domains</legend>
      <label class="check">
        <input type="checkbox" name="all_inbound_domains" value="1" {{if .FormAllInbound}}checked{{end}}>
        All, including domains added later
      </label>
      {{range .InboundDomains}}
      <label class="check">
        <input type="checkbox" name="inbound_domain_ids" value="{{.ID}}" {{if index $.FormInbound .ID}}checked{{end}}>
        {{.Name}}
      </label>
      {{end}}
    </fieldset>
    {{end}}
    </div>

    <button type="submit">{{if .IsEdit}}Save{{else}}Create{{end}}</button>
  </form>
  {{if .IsEdit}}
  {{if .LastGlobalLocked}}
  <p class="muted">The only global administrator cannot be deleted.</p>
  {{else}}
  <a class="danger" href="/users/{{.UserID}}/delete">Delete user</a>
  {{end}}
  {{end}}
</div>
{{end}}