\clearance{ADM}
\on.clear{SYS}
{\cond{T.group}{\user.group}\cond{T.group2}{\user.group}}
{\const{T.group}{\user.group}\const{T.group2}{\user.group}}
\cond{T.ID}{0}
\cond{T.EDIT}{0}
\cond{T.email}{}
\cond{T.name}{}
\cond{T.cmd}{}
\ldef{uclear}{x}{\forall{ii}{\1}{[ii left ":"] }}
\page{
  \db{USERS}{
    [groups:=\getgroups];
    [users:=\query{\allowed{\T.group}}{[UID] }];    
    \find.rec{\T.ID}{
      [this:=users which \T.ID];
      \if(this>1){\href{\this?ID=[users nth (this-1)]}{Prev}|};
      \href{\this}{List};
      \if(this<count users){|\href{\this?ID=[users nth (this+1)]}{Next}}
      \form{
        \variable{ID}(UID);
        \if{\T.EDIT}{
          \table{bgcolor=#dddddd cellspacing=4 cellpadding=4}{
            \tr{\td{align=right}{User ID:}\td(UID)}
            \tr{\td{align=right}{Alias:}\td{\input{alias}{16}(ALIAS)}}
            \tr{\td{align=right}{Name:}\td{\input{name}{40}(NAME)}}
            \tr{\td{align=right}{E-mail:}\td{\input{email}{64}(EMAIL)}}
          }
          \button{Update}
        }{
          \table{bgcolor=#dddddd cellspacing=4 cellpadding=4}{
            \tr{\td{align=right}{User ID:}\td(UID)}
            \tr{\td{align=right}{Alias:}\td{\href{\req.uri?ID=[UID]&EDIT=1}(ALIAS)}}
            \tr{\td{align=right}{Name:}\td(NAME)}
            \tr{\td{align=right}{E-mail:}\td{\href{\req.uri?ID=[UID]&EDIT=1}(EMAIL)}}
            \tr{\td{align=right}{Group:}\td(GROUP)}
            \tr{\td{align=right}{Clearance:}\td{\uclear(ACCESS)}}
          }
          \on.clear{ROOT}{
            \select{group}{
              \forall{i}(groups){\option{\if(i eq \T.group){selected}}(i)(i)}
            };
            \button{+}\button{-}\button{=}
            \indent{3}\input{group2}{8}\button{++}
            \if(count ACCESS <= 1){\button{DELETE}}
          }{
            \button{\if(\uclear(ACCESS) which \T.group){-}{+} \T.group}
          }
        }
      }
    }{
      \h1{Admin \T.group}
      \form{
        \on.clear{SYS}{
          \select{group}{
            \on.clear{ROOT}{
              \forall{ii}(groups){\option{\if(ii eq \T.group){selected}}(ii)(ii)}
              \option{\if(\T.group eq ""){selected}}{}{none}
            }{
              \forall{ii}{\user.clear}{
                \option{\if(ii eq \T.group){selected}}(ii)(ii)
              }
            }
          }
          \button{Select Group}
          \indent{3}
        }
        \input{email}{24}
        \indent{2}
        \button{Add User}
      }
      <p>
      \table{
        \tr{
          \td{width=10%}{\bf{ID}}
          \td{width=10%}{\bf{Alias}}
          \td{width=40%}{\bf{Name}}
          \td{width=10%}{\bf{GROUP}}
          \td{width=30%}{\bf{CLEAR}}
        }
        \db{USERS}{
          \query{\allowed{\T.group}}{
            \tr{
              \td{\href{\req.uri?ID=[UID]}(UID)};
              \td{\href{\req.uri?ID=[UID]&EDIT=1}(ALIAS)};
              \td(NAME);
              \td(GROUP);
              \td{\uclear(ACCESS)}
            }
          }
        }
      }
    }
  }
}
\onpost{
  \switch(first \T.cmd)
  {++}{
    \log{addclear \T.group2 for \T.ID};
    \su{\T.ID}{\user.access.add{\T.group2}\user.update};
    \redirect{\this?ID=\T.ID}
  }
  {+}{
    \log{addclear \T.group for \T.ID};
    \su{\T.ID}{\user.access.add{\T.group}\user.update};
    \redirect{\this?ID=\T.ID}
  }
  {-}{
    \log{remclear \T.group for \T.ID};
    \su{\T.ID}{\user.access.rem{\T.group}\user.update};
    \redirect{\this?ID=\T.ID}
  }
  {=}{
    \log{set group \T.group for \T.ID};
    \on.clear{ROOT}{\su{\T.ID}{\user.group.set{\T.group}\user.update}}
    \redirect{\this?ID=\T.ID}
  }
  {Update}{
    \log{update name for \T.ID};
    \su{\T.ID}{
      \user.name.set{\T.name};
      \user.alias.set{\T.alias};
      \user.emails.set{\T.email};
      \user.update;
    }
    \redirect{\this?ID=\T.ID}
  }
  {Select}{
    \on.clear{SYS}{\user.group.set{\T.group}\user.update}
    \redirect{\referer}
  }
  {DELETE}{
    \log{DELETE \T.ID};
    \on.clear{ROOT}{\remuser{\T.ID}};
    \redirect{\referer}
  }
  {
    [uid:=\getuser{\T.email}];
    \log{add \T.group to [uid]};
    \su(uid){\user.access.add{\T.group}\user.update};
    \redirect{\this?ID=[uid]}
  }
}