{% extends "base.html" %}
{% block content %}
<div class="section-title">
  <span class="eyebrow">PRE-KALOTSAVAM</span>
  <h2>User Management</h2>
  <p>Create and manage School Users, Result Entry Users and Admin Users.</p>
</div>

<div class="split-grid">
  <div class="form-card">
    <h3>Create User</h3>
    <form method="post">
      {% csrf_token %}
      <input type="hidden" name="action" value="create">
      {{ form.as_p }}
      <button class="btn primary">Create User</button>
    </form>
  </div>

  <div class="panel">
    <h3>Role Rules</h3>
    <ul class="plain-list">
      <li>School User username must equal the selected School Code.</li>
      <li>Result Entry Users can enter, confirm and publish results.</li>
      <li>Admin Users have full administrative access.</li>
      <li>Use Change Password to maintain an existing account.</li>
    </ul>
  </div>
</div>

<h3>Existing Users</h3>
<table>
<tr>
  <th>Username</th>
  <th>Role</th>
  <th>School</th>
  <th>Active</th>
  <th>Password</th>
  <th>Action</th>
</tr>
{% for u in users %}
<tr>
  <td>{{ u.username }}</td>
  <td>
    {% if u.is_superuser %}
      Admin User
    {% else %}
      {% for g in u.groups.all %}
        {% if g.name == "School User" %}School User{% endif %}
        {% if g.name == "Result Entry User" %}Result Entry User{% endif %}
      {% endfor %}
    {% endif %}
  </td>
  <td>
    {% for g in u.groups.all %}
      {% if g.name == "School User" %}
        {{ u.username }}
      {% endif %}
    {% endfor %}
  </td>
  <td>{{ u.is_active|yesno:"Active,Disabled" }}</td>
  <td>
    <form method="post" class="inline">
      {% csrf_token %}
      <input type="hidden" name="action" value="password">
      <input type="hidden" name="user" value="{{ u.id }}">
      <input type="password" name="password" placeholder="New password" required>
      <button class="btn small">Change</button>
    </form>
  </td>
  <td>
    {% if u.id != user.id %}
    <form method="post" class="inline" onsubmit="return confirm('Delete this user?');">
      {% csrf_token %}
      <input type="hidden" name="action" value="delete">
      <input type="hidden" name="user_id" value="{{ u.id }}">
      <button class="btn small danger">Delete</button>
    </form>
    {% else %}
      Current User
    {% endif %}
  </td>
</tr>
{% empty %}
<tr><td colspan="6">No users found.</td></tr>
{% endfor %}
</table>
{% endblock %}