@extends('layouts.app')
@section('title',$role->exists?'Edit Role':'New Role') @section('page_title',$role->exists?'Edit Role':'New Role')
@section('content')<div class="page-header"><div><h1>{{ $role->exists?'Role Permissions':'Create Role' }}</h1><p class="muted">Permissions are action-specific. Branch access remains controlled by the user profile.</p></div><a class="btn btn-secondary" href="{{ route('users.index') }}">Back</a></div>
<form method="post" action="{{ $role->exists?route('roles.update',$role):route('roles.store') }}">@csrf @if($role->exists)@method('put')@endif<div class="card"><div class="card-body"><div class="form-grid"><div class="field"><label>Role Name *</label><input class="control" name="name" value="{{ old('name',$role->name) }}" required></div><div class="field"><label>Role Slug *</label><input class="control" name="slug" value="{{ old('slug',$role->slug) }}" @readonly($role->is_system) required></div></div></div></div>
@php($selected=old('permission_ids',$role->exists?$role->permissions->pluck('id')->all():[]))
<div class="card" style="margin-top:20px"><div class="card-header"><h3>Permission Matrix</h3><label class="checkbox"><input type="checkbox" data-check-all> Select all</label></div><div class="table-wrap"><table><thead><tr><th>Module</th><th>Allowed actions</th></tr></thead><tbody>@foreach($permissions as $module=>$items)<tr><td><strong>{{ ucwords(str_replace('_',' ',$module)) }}</strong></td><td><div class="permission-row">@foreach($items as $permission)<label class="checkbox"><input type="checkbox" name="permission_ids[]" value="{{ $permission->id }}" @checked(in_array($permission->id,$selected))> {{ ucwords(str_replace('_',' ',$permission->action)) }}</label>@endforeach</div></td></tr>@endforeach</tbody></table></div><div class="card-footer"><button class="btn btn-primary">Save Role</button>@if($role->exists&&!$role->is_system&&auth()->user()->hasPermission('roles.delete_draft'))<button type="submit" form="delete-role" class="btn btn-danger" onclick="return confirm('Delete this role?')">Delete</button>@endif</div></div></form>@if($role->exists)<form id="delete-role" method="post" action="{{ route('roles.destroy',$role) }}">@csrf @method('delete')</form>@endif
@push('scripts')<script>document.querySelector('[data-check-all]')?.addEventListener('change',e=>document.querySelectorAll('input[name="permission_ids[]"]').forEach(x=>x.checked=e.target.checked));</script>@endpush
@endsection