{% extends "base.html" %}{% block title %}Users{% endblock %}{% block page_title %}User Management{% endblock %}
{% block content %}
<div class="page-header"><div><h1>Users & Assignments</h1><p>Manage workforce access, branch and department scope, roles, and temporary passwords.</p></div></div>
<details class="workflow-panel"><summary>Create User Account</summary><div class="panel-body"><form method="post"><input type="hidden" name="csrf_token" value="{{ csrf_token() }}"><div class="form-grid">
  <label class="span-4 required">Username<input type="text" name="username" required></label><label class="span-4 required">Full Name<input type="text" name="full_name" required></label><label class="span-4">Employee ID<input type="text" name="employee_id"></label>
  <label class="span-4">Email<input type="email" name="email"></label><label class="span-4">Mobile<input type="text" name="mobile"></label><label class="span-4">Position<input type="text" name="position"></label>
  <label class="span-4 required">Role<select name="role_id" required><option value="">Select role</option>{% for role in roles %}<option value="{{ role.id }}">{{ role.name }} · {{ role.scope }}</option>{% endfor %}</select></label>
  <label class="span-4">Branch<select name="branch_id" data-branch-select="#new-user-department"><option value="">Global / none</option>{% for branch in branches %}<option value="{{ branch.id }}">{{ branch.name }}</option>{% endfor %}</select></label>
  <label class="span-4">Department<select id="new-user-department" name="department_id"><option value="">None</option>{% for department in departments %}<option value="{{ department.id }}" data-branch="{{ department.branch_id }}">{{ department.name }}</option>{% endfor %}</select></label>
  <label class="span-6 required">Temporary Password<input type="password" name="password" minlength="12" required></label><div class="span-12"><div class="form-note">The user must change this temporary password. Use at least 12 characters.</div></div><div class="span-12"><button class="button primary" type="submit">Create User</button></div>
</div></form></div></details>
<form class="filter-bar" method="get" style="grid-template-columns:1fr auto"><input type="text" name="q" value="{{ request.args.get('q','') }}" placeholder="Search username, name, or employee ID"><button class="button secondary" type="submit">Search</button></form>
<section class="card"><div class="card-header"><h2>{{ users|length }} User Accounts</h2></div><div class="table-wrap"><table class="data-table"><thead><tr><th>User</th><th>Assignment</th><th>Role / Scope</th><th>Status</th><th></th></tr></thead><tbody>{% for user in users %}<tr><td class="primary-cell">{{ user.full_name }}<br><small>{{ user.username }} · {{ user.employee_id or 'No employee ID' }}</small></td><td>{{ user.branch.name if user.branch else 'Global' }}<br><small>{{ user.department.name if user.department else 'No department' }}</small></td><td>{{ user.role.name }}<br><small>{{ user.role.scope|title }}</small></td><td><span class="status">{{ 'Active' if user.is_active else 'Inactive' }}</span>{% if user.must_change_password %}<br><small>Must change password</small>{% endif %}</td><td><details class="workflow-panel" style="min-width:300px;margin:0"><summary>Edit</summary><div class="panel-body"><form method="post" action="{{ url_for('admin.user_update', user_id=user.id) }}"><input type="hidden" name="csrf_token" value="{{ csrf_token() }}"><label>Full Name<input type="text" name="full_name" value="{{ user.full_name }}" required></label><label>Email<input type="email" name="email" value="{{ user.email or '' }}"></label><label>Mobile<input type="text" name="mobile" value="{{ user.mobile or '' }}"></label><label>Position<input type="text" name="position" value="{{ user.position or '' }}"></label><label>Role<select name="role_id">{% for role in roles %}<option value="{{ role.id }}" {% if user.role_id==role.id %}selected{% endif %}>{{ role.name }}</option>{% endfor %}</select></label><label>Branch<select name="branch_id" data-branch-select="#dept-{{ user.id }}"><option value="">Global / none</option>{% for branch in branches %}<option value="{{ branch.id }}" {% if user.branch_id==branch.id %}selected{% endif %}>{{ branch.name }}</option>{% endfor %}</select></label><label>Department<select id="dept-{{ user.id }}" name="department_id"><option value="">None</option>{% for department in departments %}<option value="{{ department.id }}" data-branch="{{ department.branch_id }}" {% if user.department_id==department.id %}selected{% endif %}>{{ department.name }}</option>{% endfor %}</select></label><label>New Temporary Password<input type="password" name="new_password" minlength="12" placeholder="Leave blank to keep current"></label><button class="button primary small" type="submit">Save User</button></form><form method="post" action="{{ url_for('admin.user_toggle', user_id=user.id) }}" data-confirm="Change this user's access status?" style="margin-top:8px"><input type="hidden" name="csrf_token" value="{{ csrf_token() }}"><button class="button {{ 'danger' if user.is_active else 'secondary' }} small" type="submit">{{ 'Deactivate' if user.is_active else 'Activate' }}</button></form></div></details></td></tr>{% endfor %}</tbody></table></div></section>
{% endblock %}