@extends('layouts.admin')
@section('title','Staff access') @section('heading','Staff access')
@section('content')
<div class="page-head"><div><div class="eyebrow">SECURITY</div><h2>Roles and least-privilege access</h2><p>Assigned administrators receive only selected capabilities. Unassigned administrators are platform owners.</p></div><a class="button secondary" href="{{ route('admin.access.audit') }}">Audit trail</a></div>
<section class="panel"><div class="panel-head"><div><h3>Create staff role</h3><p>Use a narrow set of permissions for each operational team.</p></div></div>
<form method="post" action="{{ route('admin.access.roles.store') }}" class="form-grid">@csrf
<label>Name<input name="name" required maxlength="100"></label><label>Slug<input name="slug" required maxlength="100" pattern="[A-Za-z0-9_-]+"></label><label class="span-2">Description<textarea name="description" maxlength="1000"></textarea></label>
<fieldset class="span-2"><legend>Permissions</legend>@foreach($permissions as $group => $items)<strong>{{ ucfirst($group) }}</strong><div class="check-grid">@foreach($items as $permission)<label><input type="checkbox" name="permissions[]" value="{{ $permission->id }}"> {{ $permission->name }}</label>@endforeach</div>@endforeach</fieldset><div><button class="button" type="submit">Create role</button></div></form></section>
<section class="panel"><div class="panel-head"><div><h3>Roles</h3><p>{{ $roles->count() }} configured roles</p></div></div>
@forelse($roles as $role)<form method="post" action="{{ route('admin.access.roles.update',$role) }}" class="form-grid border-row">@csrf @method('put')
<label>Name<input name="name" value="{{ $role->name }}" required></label><label>Slug<input name="slug" value="{{ $role->slug }}" required></label><label>Description<input name="description" value="{{ $role->description }}"></label><label>Status<select name="is_active"><option value="1" @selected($role->is_active)>Active</option><option value="0" @selected(!$role->is_active)>Disabled</option></select></label>
<div class="span-2 check-grid">@foreach($permissions->flatten() as $permission)<label><input type="checkbox" name="permissions[]" value="{{ $permission->id }}" @checked($role->permissions->contains($permission))> {{ $permission->name }}</label>@endforeach</div><div><button class="button" type="submit">Save</button> <small>{{ $role->assignments_count }} staff</small></div></form>
@empty<p class="empty-state">No staff roles yet.</p>@endforelse</section>
<section class="panel"><div class="panel-head"><div><h3>Assign administrator</h3><p>Only active administrators without an assignment are listed.</p></div></div>
<form method="post" action="{{ route('admin.access.staff.assign') }}" class="form-grid">@csrf<label>Administrator<select name="user_id" required><option value="">Select</option>@foreach($candidates as $user)<option value="{{ $user->id }}">{{ $user->name }} · {{ $user->email }}</option>@endforeach</select></label><label>Role<select name="access_role_id" required>@foreach($roles->where('is_active',true) as $role)<option value="{{ $role->id }}">{{ $role->name }}</option>@endforeach</select></label><label>Expires (optional)<input type="datetime-local" name="expires_at"></label><div><button class="button" type="submit">Assign access</button></div></form></section>
<section class="panel"><div class="panel-head"><div><h3>Active staff assignments</h3></div></div>@forelse($staff as $assignment)<form method="post" action="{{ route('admin.access.staff.update',$assignment) }}" class="form-grid border-row">@csrf @method('put')<div><strong>{{ $assignment->user->name }}</strong><small class="block">{{ $assignment->user->email }}</small></div><label>Role<select name="access_role_id">@foreach($roles as $role)<option value="{{ $role->id }}" @selected($assignment->access_role_id===$role->id)>{{ $role->name }}</option>@endforeach</select></label><label>Status<select name="is_active"><option value="1" @selected($assignment->is_active)>Active</option><option value="0" @selected(!$assignment->is_active)>Suspended</option></select></label><label>Expires<input type="datetime-local" name="expires_at" value="{{ $assignment->expires_at?->format('Y-m-d\TH:i') }}"></label><div><button class="button" type="submit">Update</button></div></form>@empty<p class="empty-state">No assigned staff.</p>@endforelse</section>
@endsection