{% extends "base.html" %}
{% block title %}Users{% endblock %}
{% block content %}
<div class="page-head"><h1>Users</h1></div>
<form method="post" class="panel mb-3">
  <input type="hidden" name="_csrf" value="{{ csrf_token() }}">
  <h2>Add a user</h2>
  <div class="row g-2 align-items-end">
    <div class="col-md-3"><label class="form-label" for="full_name">Full name</label>
      <input class="form-control" id="full_name" name="full_name"></div>
    <div class="col-md-2"><label class="form-label" for="username">Username</label>
      <input class="form-control" id="username" name="username" required></div>
    <div class="col-md-3"><label class="form-label" for="password">Password (6+ characters)</label>
      <input class="form-control" id="password" name="password" type="password" minlength="6" required></div>
    <div class="col-md-2"><label class="form-label" for="role">Role</label>
      <select class="form-select" id="role" name="role"><option value="staff">Staff</option><option value="admin">Admin</option></select></div>
    <div class="col-md-2"><button class="btn btn-primary w-100">Add user</button></div>
  </div>
</form>
<div class="panel flush">
  <table class="table align-middle">
    <thead><tr><th>Username</th><th>Full name</th><th>Role</th><th>Created</th><th></th></tr></thead>
    <tbody>
    {% for u in rows %}
      <tr><td>{{ u.username }}</td><td>{{ u.full_name }}</td><td>{{ u.role }}</td><td>{{ u.created_at[:10] }}</td>
        <td class="num">{% if u.id != session.user_id %}
          <form class="d-inline" method="post" action="{{ url_for('user_delete', user_id=u.id) }}" onsubmit="return confirm('Delete user {{ u.username }}?')">
            <input type="hidden" name="_csrf" value="{{ csrf_token() }}"><button class="btn btn-sm btn-outline-danger">Delete</button></form>
        {% endif %}</td></tr>
    {% endfor %}
    </tbody>
  </table>
</div>
{% endblock %}