web: admins can change permissions of users

2 files changed, 70 insertions, 10 deletions

diff --git a/templates/products/entry.html b/templates/products/entry.html
index 83d98b8..05c1dce 100644
--- a/templates/products/entry.html
+++ b/templates/products/entry.html
@@ -1,11 +1,11 @@
 <h2>Product Information</h2>
 <p>
 	<table class="table table-bordered table-nonfluid">
-		<th>EAN</th><td>{{{EAN}}}</td></tr>
-		<th>Name</th><td>{{{NAME}}}</td></tr>
-		<th>Category</th><td>{{{CATEGORY}}}</td></tr>
-		<th>Amount</th><td>{{{AMOUNT}}}</td></tr>
-		<th>State</th><td><button id="statebutton" type="button" class="btn {{{BTNSTATE}}}" {{{ISADMIN2}}}>{{{STATE}}}</button></td></tr>
+		<tr><th>EAN</th><td>{{{EAN}}}</td></tr>
+		<tr><th>Name</th><td>{{{NAME}}}</td></tr>
+		<tr><th>Category</th><td>{{{CATEGORY}}}</td></tr>
+		<tr><th>Amount</th><td>{{{AMOUNT}}}</td></tr>
+		<tr><th>State</th><td><button id="statebutton" type="button" class="btn {{{BTNSTATE}}}" {{{ISADMIN2}}}>{{{STATE}}}</button></td></tr>
 	</table>
 </p></p>
 
diff --git a/templates/users/entry.html b/templates/users/entry.html
index ad20b70..03594cb 100644
--- a/templates/users/entry.html
+++ b/templates/users/entry.html
@@ -25,9 +25,9 @@
 		<tr><th colspan="2">Administrative Information</th></tr>
 		<tr><th>Disabled</th><td>{{{DISABLED}}}</td></tr>
 		<tr><th>Superuser</th><td>{{{ISSUPERUSER}}}</td></tr>
-		<tr><th>Auth Products</th><td>{{{HAS_AUTH_PRODUCTS}}}</td></tr>
-		<tr><th>Auth Cashbox</th><td>{{{HAS_AUTH_CASHBOX}}}</td></tr>
-		<tr><th>Auth Users</th><td>{{{HAS_AUTH_USERS}}}</td></tr>
+		<tr><th>Auth Products</th><td><button id="authproductsbutton" type="button" class="btn {{{BTN_AUTH_PRODUCTS}}}" {{{ISADMIN2}}}>{{{HAS_AUTH_PRODUCTS}}}</button></td></tr>
+		<tr><th>Auth Cashbox</th><td><button id="authcashboxbutton" type="button" class="btn {{{BTN_AUTH_CASHBOX}}}" {{{ISADMIN2}}}>{{{HAS_AUTH_CASHBOX}}}</button></td></tr>
+		<tr><th>Auth Users</th><td><button id="authusersbutton" type="button" class="btn {{{BTN_AUTH_USERS}}}" {{{ISADMIN2}}}>{{{HAS_AUTH_USERS}}}</button></td></tr>
 		<tr><th>Invoices</th><td><a href="./{{{UID}}}/invoice">Show</a></td></tr>
 		<tr><th rowspan="3">Password</th><td><input name="password1" placeholder="New Password" type="password" /></td></tr>
 		<tr><td><input name="password2" placeholder="New Password (again)" type="password" /></td></tr>
@@ -36,6 +36,66 @@
 </form>
 
 <script language="JavaScript">
-	code39_init();
-	code39_draw("USER {{{UID}}}", true);
+code39_init();
+code39_draw("USER {{{UID}}}", true);
+
+$('#authproductsbutton').on('click', function (e) {
+	var req = $.getJSON(
+		"/users/{{{UID}}}/toggle_auth_products",
+		function( data ) {
+			if(data["products"] == "false") {
+				$('#authproductsbutton').html("No")
+				$('#authproductsbutton').addClass("btn-danger")
+				$('#authproductsbutton').removeClass("btn-success")
+			} else if(data["products"] == "true") {
+				$('#authproductsbutton').html("Yes")
+				$('#authproductsbutton').addClass("btn-success")
+				$('#authproductsbutton').removeClass("btn-danger")
+			} else {
+				console.error("unknown state")
+				console.info(data)
+			}
+		}
+	);
+});
+
+$('#authcashboxbutton').on('click', function (e) {
+	var req = $.getJSON(
+		"/users/{{{UID}}}/toggle_auth_cashbox",
+		function( data ) {
+			if(data["cashbox"] == "false") {
+				$('#authcashboxbutton').html("No")
+				$('#authcashboxbutton').addClass("btn-danger")
+				$('#authcashboxbutton').removeClass("btn-success")
+			} else if(data["cashbox"] == "true") {
+				$('#authcashboxbutton').html("Yes")
+				$('#authcashboxbutton').addClass("btn-success")
+				$('#authcashboxbutton').removeClass("btn-danger")
+			} else {
+				console.error("unknown state")
+				console.info(data)
+			}
+		}
+	);
+});
+
+$('#authusersbutton').on('click', function (e) {
+	var req = $.getJSON(
+		"/users/{{{UID}}}/toggle_auth_users",
+		function( data ) {
+			if(data["users"] == "false") {
+				$('#authusersbutton').html("No")
+				$('#authusersbutton').addClass("btn-danger")
+				$('#authusersbutton').removeClass("btn-success")
+			} else if(data["users"] == "true") {
+				$('#authusersbutton').html("Yes")
+				$('#authusersbutton').addClass("btn-success")
+				$('#authusersbutton').removeClass("btn-danger")
+			} else {
+				console.error("unknown state")
+				console.info(data)
+			}
+		}
+	);
+});
 </script>