Users crud controller for pylons

    :created_on: Apr 4, 2010

    :author: marcink

    :copyright: (C) 2010-2012 Marcin Kuzminski <marcin@python-works.com>

    :license: GPLv3, see COPYING for more details.

"""

# This program is free software: you can redistribute it and/or modify

# it under the terms of the GNU General Public License as published by

# the Free Software Foundation, either version 3 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import logging

import traceback

import formencode

from pylons import response

from formencode import htmlfill

from pylons import request, session, tmpl_context as c, url, config

from pylons.controllers.util import redirect

from pylons.i18n.translation import _

import rhodecode

from rhodecode.lib.exceptions import DefaultUserException, \

    UserOwnsReposException

from rhodecode.lib import helpers as h

from rhodecode.lib.auth import LoginRequired, HasPermissionAllDecorator, \

    AuthUser

from rhodecode.lib.base import BaseController, render

from rhodecode.model.db import User, UserEmailMap, UserIpMap

from rhodecode.model.forms import UserForm

from rhodecode.model.user import UserModel

from rhodecode.model.meta import Session

from rhodecode.lib.utils import action_logger

from rhodecode.lib.compat import json

from rhodecode.lib.utils2 import datetime_to_time, str2bool

log = logging.getLogger(__name__)

class UsersController(BaseController):

    """REST Controller styled on the Atom Publishing Protocol"""

    # To properly map this controller, ensure your config/routing.py

    # file has a resource setup:

    #     map.resource('user', 'users')

    @LoginRequired()

    @HasPermissionAllDecorator('hg.admin')

    def __before__(self):

        c.admin_user = session.get('admin_user')

        c.admin_username = session.get('admin_username')

        super(UsersController, self).__before__()

        c.available_permissions = config['available_permissions']

    def index(self, format='html'):

        """GET /users: All items in the collection"""

        # url('users')

        c.users_list = User.query().order_by(User.username).all()

        users_data = []

        total_records = len(c.users_list)

        _tmpl_lookup = rhodecode.CONFIG['pylons.app_globals'].mako_lookup

        template = _tmpl_lookup.get_template('data_table/_dt_elements.html')

        grav_tmpl = lambda user_email, size: (

                template.get_def("user_gravatar")

                .render(user_email, size, _=_, h=h, c=c))

        user_lnk = lambda user_id, username: (

                template.get_def("user_name")

                .render(user_id, username, _=_, h=h, c=c))

        user_actions = lambda user_id, username: (

                template.get_def("user_actions")

                .render(user_id, username, _=_, h=h, c=c))

        for user in c.users_list:

            users_data.append({

                "gravatar": grav_tmpl(user. email, 24),

                "raw_username": user.username,

                "username": user_lnk(user.user_id, user.username),

                "firstname": user.name,

                "lastname": user.lastname,

                "last_login": h.fmt_date(user.last_login),

                "last_login_raw": datetime_to_time(user.last_login),

                "action": user_actions(user.user_id, user.username),

            })

        c.data = json.dumps({

            "totalRecords": total_records,

            "startIndex": 0,

            "sort": None,

            "dir": "asc",

            "records": users_data

        })

        return render('admin/users/users.html')

    def create(self):

        """POST /users: Create a new item"""

        # url('users')

        user_model = UserModel()

        user_form = UserForm()()

        try:

            form_result = user_form.to_python(dict(request.POST))

            user_model.create(form_result)

            usr = form_result['username']

            action_logger(self.rhodecode_user, 'admin_created_user:%s' % usr,

                          None, self.ip_addr, self.sa)

            h.flash(_('Created user %s') % usr,

                    category='success')

            Session().commit()

        except formencode.Invalid, errors:

            return htmlfill.render(

                render('admin/users/user_add.html'),

                defaults=errors.value,

                errors=errors.error_dict or {},

                prefix_error=False,

                encoding="UTF-8")

        except Exception:

            log.error(traceback.format_exc())

            h.flash(_('Error occurred during creation of user %s') \

                    % request.POST.get('username'), category='error')

        return redirect(url('users'))

    def new(self, format='html'):

        """GET /users/new: Form to create a new item"""

        # url('new_user')

        return render('admin/users/user_add.html')

    def update(self, id):

        """PUT /users/id: Update an existing item"""

        # Forms posted to this method should contain a hidden field:

        #    <input type="hidden" name="_method" value="PUT" />

        # Or using helpers:

        #    h.form(url('update_user', id=ID),

        #           method='put')

        # url('user', id=ID)

        user_model = UserModel()

        c.user = user_model.get(id)

        c.ldap_dn = c.user.ldap_dn

        c.perm_user = AuthUser(user_id=id, ip_addr=self.ip_addr)

        _form = UserForm(edit=True, old_data={'user_id': id,

                                              'email': c.user.email})()

        form_result = {}

        try:

            form_result = _form.to_python(dict(request.POST))

            skip_attrs = []

            if c.ldap_dn:

                #forbid updating username for ldap accounts

                skip_attrs = ['username']

            user_model.update(id, form_result, skip_attrs=skip_attrs)

            usr = form_result['username']

            action_logger(self.rhodecode_user, 'admin_updated_user:%s' % usr,

                          None, self.ip_addr, self.sa)

            h.flash(_('User updated successfully'), category='success')

            Session().commit()

        except formencode.Invalid, errors:

            c.user_email_map = UserEmailMap.query()\

                            .filter(UserEmailMap.user == c.user).all()

            c.user_ip_map = UserIpMap.query()\

                            .filter(UserIpMap.user == c.user).all()

            defaults = errors.value

            e = errors.error_dict or {}

            defaults.update({

                'create_repo_perm': user_model.has_perm(id, 'hg.create.repository'),

                'fork_repo_perm': user_model.has_perm(id, 'hg.fork.repository'),

                '_method': 'put'

            })

            return htmlfill.render(

                render('admin/users/user_edit.html'),

                defaults=defaults,

                errors=e,

                prefix_error=False,

                encoding="UTF-8")

        except Exception:

            log.error(traceback.format_exc())

            h.flash(_('Error occurred during update of user %s') \

                    % form_result.get('username'), category='error')

        return redirect(url('edit_user', id=id))

    if hasattr(repository, 'alias'):

        _type = repository.alias

    elif hasattr(repository, 'repo_type'):

        _type = repository.repo_type

    else:

        _type = repository

    return _type == 'git'

def is_hg(repository):

    if hasattr(repository, 'alias'):

        _type = repository.alias

    elif hasattr(repository, 'repo_type'):

        _type = repository.repo_type

    else:

        _type = repository

    return _type == 'hg'

def email_or_none(author):

    # extract email from the commit string

    _email = email(author)

    if _email != '':

        # check it against RhodeCode database, and use the MAIN email for this

        # user

        user = User.get_by_email(_email, case_insensitive=True, cache=True)

        if user is not None:

            return user.email

        return _email

    # See if it contains a username we can get an email from

    user = User.get_by_username(author_name(author), case_insensitive=True,

                                cache=True)

    if user is not None:

        return user.email

    # No valid email, not a valid user in the system, none!

    return None

def person(author, show_attr="username_and_name"):

    # attr to return from fetched user

    person_getter = lambda usr: getattr(usr, show_attr)

    # Valid email in the attribute passed, see if they're in the system

    _email = email(author)

    if _email != '':

        user = User.get_by_email(_email, case_insensitive=True, cache=True)

        if user is not None:

            return person_getter(user)

        return _email

    # Maybe it's a username?

    _author = author_name(author)

    user = User.get_by_username(_author, case_insensitive=True,

                                cache=True)

    if user is not None:

        return person_getter(user)

    # Still nothing?  Just pass back the author name then

    return _author

def person_by_id(id_, show_attr="username_and_name"):

    # attr to return from fetched user

    person_getter = lambda usr: getattr(usr, show_attr)

    #maybe it's an ID ?

    if str(id_).isdigit() or isinstance(id_, int):

        id_ = int(id_)

        user = User.get(id_)

        if user is not None:

            return person_getter(user)

    return id_

def desc_stylize(value):

    """

    converts tags from value into html equivalent

    :param value:

    """

    value = re.sub(r'\[see\ \=\>\ *([a-zA-Z0-9\/\=\?\&\ \:\/\.\-]*)\]',

                   '<div class="metatag" tag="see">see =&gt; \\1 </div>', value)

    value = re.sub(r'\[license\ \=\>\ *([a-zA-Z0-9\/\=\?\&\ \:\/\.\-]*)\]',

                   '<div class="metatag" tag="license"><a href="http:\/\/www.opensource.org/licenses/\\1">\\1</a></div>', value)

    value = re.sub(r'\[(requires|recommends|conflicts|base)\ \=\>\ *([a-zA-Z0-9\-\/]*)\]',

                   '<div class="metatag" tag="\\1">\\1 =&gt; <a href="/\\2">\\2</a></div>', value)

    value = re.sub(r'\[(lang|language)\ \=\>\ *([a-zA-Z\-\/\#\+]*)\]',

                   '<div class="metatag" tag="lang">\\2</div>', value)

    value = re.sub(r'\[([a-z]+)\]',

                  '<div class="metatag" tag="\\1">\\1</div>', value)

    return value

    icons

    """

        return HTML.tag('img', src=url("/images/icons/accept.png"),

                        alt=_('True'))

        return HTML.tag('img', src=url("/images/icons/cancel.png"),

                        alt=_('False'))

def action_parser(user_log, feed=False, parse_cs=False):

    """

    This helper will action_map the specified string action into translated

    fancy names with icons and links

    :param user_log: user log instance

    :param feed: use output for feeds (no html and fancy icons)

    :param parse_cs: parse Changesets into VCS instances

    """

    action = user_log.action

    action_params = ' '

    x = action.split(':')

    if len(x) > 1:

        action, action_params = x

    def get_cs_links():

        revs_limit = 3  # display this amount always

        revs_top_limit = 50  # show upto this amount of changesets hidden

        revs_ids = action_params.split(',')

        deleted = user_log.repository is None

        if deleted:

            return ','.join(revs_ids)

        repo_name = user_log.repository.repo_name

        def lnk(rev, repo_name):

            if isinstance(rev, BaseChangeset) or isinstance(rev, AttributeDict):

                lazy_cs = True

                if getattr(rev, 'op', None) and getattr(rev, 'ref_name', None):

                    lazy_cs = False

                    lbl = '?'

                    if rev.op == 'delete_branch':

                        lbl = '%s' % _('Deleted branch: %s') % rev.ref_name

                        title = ''

                    elif rev.op == 'tag':

                        lbl = '%s' % _('Created tag: %s') % rev.ref_name

                        title = ''

                    _url = '#'

                else:

                    lbl = '%s' % (rev.short_id[:8])

                    _url = url('changeset_home', repo_name=repo_name,

                               revision=rev.raw_id)

                    title = tooltip(rev.message)

            else:

                ## changeset cannot be found/striped/removed etc.

                lbl = ('%s' % rev)[:12]

                _url = '#'

                title = _('Changeset not found')

            if parse_cs:

                return link_to(lbl, _url, title=title, class_='tooltip')

            return link_to(lbl, _url, raw_id=rev.raw_id, repo_name=repo_name,

                           class_='lazy-cs' if lazy_cs else '')

        def _get_op(rev_txt):

            _op = None

            _name = rev_txt

            if len(rev_txt.split('=>')) == 2:

                _op, _name = rev_txt.split('=>')

            return _op, _name

        revs = []

        if len(filter(lambda v: v != '', revs_ids)) > 0:

            repo = None

            for rev in revs_ids[:revs_top_limit]:

                _op, _name = _get_op(rev)

                # we want parsed changesets, or new log store format is bad

                if parse_cs:

                    try:

                        if repo is None:

                            repo = user_log.repository.scm_instance

                        _rev = repo.get_changeset(rev)

                        revs.append(_rev)

                    except ChangesetDoesNotExistError:

                        log.error('cannot find revision %s in this repo' % rev)

                        revs.append(rev)

                        continue

                else:

                    _rev = AttributeDict({

                        'short_id': rev[:12],

                        'raw_id': rev,

                        'message': '',

                        'op': _op,

                        'ref_name': _name

                    })

                    revs.append(_rev)

        cs_links = []

        cs_links.append(" " + ', '.join(

            [lnk(rev, repo_name) for rev in revs[:revs_limit]]

            )

        )

                    ${h.checkbox('overwrite_default_repo','true')}

                    <label for="overwrite_default_repo">

                    <span class="tooltip"

                    title="${h.tooltip(_('All default permissions on each repository will be reset to chosen permission, note that all custom default permission on repositories will be lost'))}">

                    ${_('overwrite existing settings')}</span> </label>

                </div>

            </div>

            <div class="field">

                <div class="label">

                    <label for="default_group_perm">${_('Repository group')}:</label>

                </div>

                <div class="select">

                    ${h.select('default_group_perm','',c.group_perms_choices)}

                    ${h.checkbox('overwrite_default_group','true')}

                    <label for="overwrite_default_group">

                    <span class="tooltip"

                    title="${h.tooltip(_('All default permissions on each repository group will be reset to chosen permission, note that all custom default permission on repository groups will be lost'))}">

                    ${_('overwrite existing settings')}</span> </label>

                </div>

            </div>

            <div class="field">

                <div class="label">

                    <label for="default_register">${_('Registration')}:</label>

                </div>

                <div class="select">

                    ${h.select('default_register','',c.register_choices)}

                </div>

            </div>

             <div class="field">

                <div class="label">

                    <label for="default_create">${_('Repository creation')}:</label>

                </div>

                <div class="select">

                    ${h.select('default_create','',c.create_choices)}

                </div>

             </div>

             <div class="field">

                <div class="label">

                    <label for="default_fork">${_('Repository forking')}:</label>

                </div>

                <div class="select">

                    ${h.select('default_fork','',c.fork_choices)}

                </div>

             </div>

            <div class="buttons">

              ${h.submit('save',_('Save'),class_="ui-btn large")}

              ${h.reset('reset',_('Reset'),class_="ui-btn large")}

            </div>

        </div>

    </div>

    ${h.end_form()}

</div>

<div style="min-height:780px" class="box box-right">

    <!-- box / title -->

    <div class="title">

        <h5>${_('Default User Permissions')}</h5>

    </div>

    ## permissions overview

    <div id="perms" class="table">

           %for section in sorted(c.perm_user.permissions.keys()):

              <div class="perms_section_head">${section.replace("_"," ").capitalize()}</div>

              %if not c.perm_user.permissions[section]:

                  <span class="empty_data">${_('Nothing here yet')}</span>

              %else:

              <div id='tbl_list_wrap_${section}' class="yui-skin-sam">

               <table id="tbl_list_${section}">

                <thead>

                    <tr>

                    <th class="left">${_('Name')}</th>

                    <th class="left">${_('Permission')}</th>

                    <th class="left">${_('Edit Permission')}</th>

                </thead>

                <tbody>

                %for k in sorted(c.perm_user.permissions[section], key=lambda s: s.lower):

                     <%

                     if section != 'global':

                         section_perm = c.perm_user.permissions[section].get(k)

                         _perm = section_perm.split('.')[-1]

                     else:

                         _perm = section_perm = None

                     %>

                    <tr>

                        <td>

                            %if section == 'repositories':

                                <a href="${h.url('summary_home',repo_name=k)}">${k}</a>

                            %elif section == 'repositories_groups':

                                <a href="${h.url('repos_group_home',group_name=k)}">${k}</a>

                            %else:

                                ${h.get_permission_name(k)}

                            %endif

                        </td>

                        <td>

                            %if section == 'global':

                            %else:

                             <span class="perm_tag ${_perm}">${section_perm}</span>

                            %endif

                        </td>

                        <td>

                            %if section == 'repositories':

                                <a href="${h.url('edit_repo',repo_name=k,anchor='permissions_manage')}">${_('edit')}</a>

                            %elif section == 'repositories_groups':

                                <a href="${h.url('edit_repos_group',group_name=k,anchor='permissions_manage')}">${_('edit')}</a>

                            %else:

                                --

                            %endif

                        </td>

                    </tr>

                %endfor

                </tbody>

               </table>

              </div>

              %endif

           %endfor

    </div>

</div>

<div class="box box-left" style="clear:left">

    <!-- box / title -->

    <div class="title">

        <h5>${_('Allowed IP addresses')}</h5>

    </div>

    <div class="ips_wrap">

      <table class="noborder">

      %if c.user_ip_map:

        %for ip in c.user_ip_map:

          <tr>

              <td><div class="ip">${ip.ip_addr}</div></td>

              <td><div class="ip">${h.ip_range(ip.ip_addr)}</div></td>

              <td>

                ${h.form(url('user_ips_delete', id=c.user.user_id),method='delete')}

                    ${h.hidden('del_ip',ip.ip_id)}

                    ${h.hidden('default_user', 'True')}

                    ${h.submit('remove_',_('delete'),id="remove_ip_%s" % ip.ip_id,

                    class_="delete_icon action_button", onclick="return  confirm('"+_('Confirm to delete this ip: %s') % ip.ip_addr+"');")}

                ${h.end_form()}

              </td>

          </tr>

        %endfor

       %else:

        <tr><td><div class="ip">${_('All IP addresses are allowed')}</div></td></tr>

       %endif

      </table>

    </div>

    ${h.form(url('user_ips', id=c.user.user_id),method='put')}

    <div class="form">

        <!-- fields -->

        <div class="fields">

             <div class="field">

                <div class="label">

                    <label for="new_ip">${_('New ip address')}:</label>

                </div>

                <div class="input">

                    ${h.hidden('default_user', 'True')}

                    ${h.text('new_ip', class_='medium')}

                </div>

             </div>

            <div class="buttons">

              ${h.submit('save',_('Add'),class_="ui-btn large")}

              ${h.reset('reset',_('Reset'),class_="ui-btn large")}

            </div>

        </div>

    </div>

    ${h.end_form()}

</div>

</%def>

                    </div>

                </div>

             </div>

            %if c.visual.repository_fields:

              ## EXTRA FIELDS

              %for field in c.repo_fields:

                <div class="field">

                    <div class="label">

                        <label for="${field.field_key_prefixed}">${field.field_label} (${field.field_key}):</label>

                    </div>

                    <div class="input input-medium">

                        ${h.text(field.field_key_prefixed, field.field_value, class_='medium')}

                        %if field.field_desc:

                          <span class="help-block">${field.field_desc}</span>

                        %endif

                    </div>

                 </div>

              %endfor

            %endif

            <div class="field">

                <div class="label">

                    <label for="input">${_('Permissions')}:</label>

                </div>

                <div class="input">

                    <%include file="repo_edit_perms.html"/>

                </div>

            </div>

            <div class="buttons">

              ${h.submit('save',_('Save'),class_="ui-btn large")}

              ${h.reset('reset',_('Reset'),class_="ui-btn large")}

            </div>

        </div>

    </div>

    ${h.end_form()}

</div>

<div class="box box-right">

    <div class="title">

        <h5>${_('Advanced settings')}</h5>

    </div>

    <h3>${_('Statistics')}</h3>

    ${h.form(url('repo_stats', repo_name=c.repo_info.repo_name),method='delete')}

    <div class="form">

       <div class="fields">

           ${h.submit('reset_stats_%s' % c.repo_info.repo_name,_('Reset current statistics'),class_="ui-btn",onclick="return confirm('"+_('Confirm to remove current statistics')+"');")}

           <div class="field" style="border:none;color:#888">

           <ul>

                <li>${_('Fetched to rev')}: ${c.stats_revision}/${c.repo_last_rev}</li>

                <li>${_('Stats gathered')}: ${c.stats_percentage}%</li>

           </ul>

           </div>

       </div>

    </div>

    ${h.end_form()}

    %if c.repo_info.clone_uri:

    <h3>${_('Remote')}</h3>

    ${h.form(url('repo_pull', repo_name=c.repo_info.repo_name),method='put')}

    <div class="form">

       <div class="fields">

           ${h.submit('remote_pull_%s' % c.repo_info.repo_name,_('Pull changes from remote location'),class_="ui-btn",onclick="return confirm('"+_('Confirm to pull changes from remote side')+"');")}

           <div class="field" style="border:none">

           <ul>

                <li><a href="${c.repo_info.clone_uri}">${c.repo_info.clone_uri}</a></li>

           </ul>

           </div>

       </div>

    </div>

    ${h.end_form()}

    %endif

    <h3>${_('Cache')}</h3>

    ${h.form(url('repo_cache', repo_name=c.repo_info.repo_name),method='delete')}

    <div class="form">

       <div class="fields">

           ${h.submit('reset_cache_%s' % c.repo_info.repo_name,_('Invalidate repository cache'),class_="ui-btn",onclick="return confirm('"+_('Confirm to invalidate repository cache')+"');")}

          <div class="field" style="border:none;color:#888">

          <ul>

              <li>${_('Manually invalidate cache for this repository. On first access repository will be cached again')}

              </li>

          </ul>

          </div>

          <div class="field" style="border:none;">

            ${_('List of cached values')}

               <table>

               <tr>

                <th>${_('Prefix')}</th>

                <th>${_('Key')}</th>

                <th>${_('Active')}</th>

                </tr>

              %for cache in c.repo_info.cache_keys:

                  <tr>

                    <td>${cache.get_prefix() or '-'}</td>

                    <td>${cache.cache_key}</td>

                  </tr>

              %endfor

              </table>

          </div>

       </div>

    </div>

    ${h.end_form()}

    <h3>${_('Public journal')}</h3>

    ${h.form(url('repo_public_journal', repo_name=c.repo_info.repo_name),method='put')}

    <div class="form">

      ${h.hidden('auth_token',str(h.get_token()))}

      <div class="field">

      %if c.in_public_journal:

        ${h.submit('set_public_%s' % c.repo_info.repo_name,_('Remove from public journal'),class_="ui-btn")}

      %else:

        ${h.submit('set_public_%s' % c.repo_info.repo_name,_('Add to public journal'),class_="ui-btn")}

      %endif

      </div>

     <div class="field" style="border:none;color:#888">

     <ul>

          <li>${_('All actions made on this repository will be accessible to everyone in public journal')}

          </li>

     </ul>

     </div>

    </div>

    ${h.end_form()}

    <h3>${_('Locking')}</h3>

    ${h.form(url('repo_locking', repo_name=c.repo_info.repo_name),method='put')}

    <div class="form">

       <div class="fields">

          %if c.repo_info.locked[0]:

           ${h.submit('set_unlock' ,_('Unlock locked repo'),class_="ui-btn",onclick="return confirm('"+_('Confirm to unlock repository')+"');")}

           ${'Locked by %s on %s' % (h.person_by_id(c.repo_info.locked[0]),h.fmt_date(h.time_to_datetime(c.repo_info.locked[1])))}

          %else:

            ${h.submit('set_lock',_('lock repo'),class_="ui-btn",onclick="return confirm('"+_('Confirm to lock repository')+"');")}

            ${_('Repository is not locked')}

          %endif

       </div>

       <div class="field" style="border:none;color:#888">

       <ul>

            <li>${_('Force locking on repository. Works only when anonymous access is disabled')}

            </li>

       </ul>

       </div>

    </div>

    ${h.end_form()}

    <h3>${_('Set as fork of')}</h3>

    ${h.form(url('repo_as_fork', repo_name=c.repo_info.repo_name),method='put')}

    <div class="form">

       <div class="fields">

           ${h.select('id_fork_of','',c.repos_list,class_="medium")}

           ${h.submit('set_as_fork_%s' % c.repo_info.repo_name,_('set'),class_="ui-btn",)}

       </div>

           <div class="field" style="border:none;color:#888">

           <ul>

                <li>${_('''Manually set this repository as a fork of another from the list''')}</li>

           </ul>

           </div>

    </div>

    ${h.end_form()}

    <h3>${_('Delete')}</h3>

    ${h.form(url('repo', repo_name=c.repo_info.repo_name),method='delete')}

    <div class="form">

        <div class="fields">

            <div class="field" style="border:none;color:#888">

##              <div class="label">

##                  <label for="">${_('Remove repository')}:</label>

##              </div>

                <div class="checkboxes">

                    ${h.submit('remove_%s' % c.repo_info.repo_name,_('Remove this repository'),class_="ui-btn red",onclick="return confirm('"+_('Confirm to delete this repository')+"');")}

                    %if c.repo_info.forks.count():

                        - ${ungettext('this repository has %s fork', 'this repository has %s forks', c.repo_info.forks.count()) % c.repo_info.forks.count()}

                        <input type="radio" name="forks" value="detach_forks" checked="checked"/> <label for="forks">${_('Detach forks')}</label>

                        <input type="radio" name="forks" value="delete_forks" /> <label for="forks">${_('Delete forks')}</label>

                    %endif

                    <ul>

                        <li>${_('This repository will be renamed in a special way in order to be unaccesible for RhodeCode and VCS systems. If you need to fully delete it from file system please do it manually')}</li>

                    </ul>

                </div>

            </div>

        </div>

    </div>

    ${h.end_form()}

</div>

##TODO: this should be controlled by the VISUAL setting

%if c.visual.repository_fields:

<div class="box box-left" style="clear:left">

    <!-- box / title -->

    <div class="title">

        <h5>${_('Extra fields')}</h5>

    </div>

                <div class="label label-checkbox">

                    <label for="admin">${_('Admin')}:</label>

                </div>

                <div class="checkboxes">

                    ${h.checkbox('admin',value=True)}

                </div>

             </div>

            <div class="buttons">

              ${h.submit('save',_('Save'),class_="ui-btn large")}

              ${h.reset('reset',_('Reset'),class_="ui-btn large")}

            </div>

        </div>

    </div>

    ${h.end_form()}

</div>

<div style="min-height:780px" class="box box-right">

    <!-- box / title -->

    <div class="title">

        <h5>${_('Permissions')}</h5>

    </div>

    ${h.form(url('user_perm', id=c.user.user_id),method='put')}

    <div class="form">

        <!-- fields -->

        <div class="fields">

             <div class="field">

                <div class="label label-checkbox">

                    <label for="inherit_permissions">${_('Inherit default permissions')}:</label>

                </div>

                <div class="checkboxes">

                    ${h.checkbox('inherit_default_permissions',value=True)}

                </div>

                <span class="help-block">${h.literal(_('Select to inherit permissions from %s settings. '

                                             'With this selected below options does not have any action') % h.link_to('default', url('edit_permission', id='default')))}</span>

             </div>

             <div id="inherit_overlay" style="${'opacity:0.3' if c.user.inherit_default_permissions else ''}" >

             <div class="field">

                <div class="label label-checkbox">

                    <label for="create_repo_perm">${_('Create repositories')}:</label>

                </div>

                <div class="checkboxes">

                    ${h.checkbox('create_repo_perm',value=True)}

                </div>

             </div>

             <div class="field">

                <div class="label label-checkbox">

                    <label for="fork_repo_perm">${_('Fork repositories')}:</label>

                </div>

                <div class="checkboxes">

                    ${h.checkbox('fork_repo_perm',value=True)}

                </div>

             </div>

             </div>

            <div class="buttons">

              ${h.submit('save',_('Save'),class_="ui-btn large")}

              ${h.reset('reset',_('Reset'),class_="ui-btn large")}

            </div>

        </div>

    </div>

    ${h.end_form()}

    ## permissions overview

    <div id="perms" class="table">

           %for section in sorted(c.perm_user.permissions.keys()):

              <div class="perms_section_head">${section.replace("_"," ").capitalize()}</div>

              %if not c.perm_user.permissions[section]:

                  <span class="empty_data">${_('Nothing here yet')}</span>

              %else:

              <div id='tbl_list_wrap_${section}' class="yui-skin-sam">

               <table id="tbl_list_${section}">

                <thead>

                    <tr>

                    <th class="left">${_('Name')}</th>

                    <th class="left">${_('Permission')}</th>

                    <th class="left">${_('Edit Permission')}</th>

                </thead>

                <tbody>

                %for k in sorted(c.perm_user.permissions[section], key=lambda s: s.lower):

                     <%

                     if section != 'global':