@HasPermissionAnyDecorator('hg.admin')

    def _before(self, *args, **kwargs):

        super(AuthSettingsController, self)._before(*args, **kwargs)

    def __load_defaults(self):

        c.available_plugins = [

            'kallithea.lib.auth_modules.auth_internal',

            'kallithea.lib.auth_modules.auth_container',

            'kallithea.lib.auth_modules.auth_ldap',

            'kallithea.lib.auth_modules.auth_crowd',

            'kallithea.lib.auth_modules.auth_pam'

        ]

    def __render(self, defaults, errors):

        c.defaults = {}

        c.plugin_settings = {}

        c.plugin_shortnames = {}

            plugin = auth_modules.loadplugin(module)

            plugin_name = plugin.name

            c.plugin_shortnames[module] = plugin_name

            c.plugin_settings[module] = plugin.plugin_settings()

            for v in c.plugin_settings[module]:

                if "default" in v:

                    c.defaults[fullname] = v["default"]

                # Current values will be the default on the form, if there are any

                setting = Setting.get_by_name(fullname)

                if setting is not None:

                    c.defaults[fullname] = setting.app_settings_value

        # we want to show , separated list of enabled plugins

        if defaults:

            c.defaults.update(defaults)

        log.debug(formatted_json(defaults))

        return formencode.htmlfill.render(

            render('admin/auth/auth_settings.html'),

            defaults=c.defaults,

            errors=errors,

            prefix_error=False,

            encoding="UTF-8",

            force_defaults=False)

            new_enabled_plugins = _auth_plugins_validator.to_python(request.POST.get('auth_plugins'))

        except formencode.Invalid:

            # User provided an invalid plugin list. Just fall back to

            # the list of currently enabled plugins. (We'll re-validate

            # and show an error message to the user, below.)

            pass

        else:

            # Hide plugins that the user has asked to be disabled, but

            # do not show plugins that the user has asked to be enabled

            # (yet), since that'll cause validation errors and/or wrong

            # settings being applied (e.g. checkboxes being cleared),

            # since the plugin settings will not be in the POST data.

        # Next, parse everything including plugin settings.

        try:

            form_result = _form.to_python(dict(request.POST))

            for k, v in form_result.items():

                if k == 'auth_plugins':

                    # we want to store it comma separated inside our settings

                    v = ','.join(v)

                log.debug("%s = %s", k, str(v))

                setting = Setting.create_or_update(k, v)

            Session().commit()

            h.flash(_('Auth settings updated successfully'),

                       category='success')

            <label class="control-label" for="auth_plugins">${_("Enabled Plugins")}</label>

            <div>

                ${h.text("auth_plugins", class_='form-control')}

                <span class="help-block">${_('Comma-separated list of plugins; Kallithea will try user authentication in plugin order')}</span>

            </div>

        </div>

        <div class="form-group">

            <label>${_('Available built-in plugins')}</label>

            <div>

                <ul class="list-group">

                %for plugin_path in c.available_plugins:

                    <li class="list-group-item">

                        </span>

                        ${plugin_path}

                    </li>

                %endfor

                </ul>

            </div>

        </div>

    </div>

        <% pluginName = c.plugin_shortnames[module] %>

        <h1>${_('Plugin')}: ${pluginName}</h1>

        <div class="form-horizontal">

        ## autoform generation, based on plugin definition from it's settings

        %for setting in c.plugin_settings[module]:

            <% fullsetting = "auth_%s_%s" % (pluginName, setting["name"]) %>

            <% displayname = (setting["formname"] if ("formname" in setting) else setting["name"]) %>

            %if setting["type"] == "password":

            <div class="form-group">

                <label class="control-label" for="${fullsetting}">${_(displayname)}</label>

                <div>

                    ${h.password(fullsetting,class_='form-control')}