@extends('layouts.admin')

@section('title', 'Download path ACL — '.config('app.name'))
@section('page_title', 'Download path ACL')

@section('breadcrumbs')
    <li class="breadcrumb-item"><a href="{{ route('admin.downloads.assets.index') }}">Download assets</a></li>
    <li class="breadcrumb-item active">Path ACL</li>
@endsection

@section('content')
    <div class="card">
        <div class="card-header"><h5 class="mb-0">protdoc path rules</h5></div>
        <div class="card-body">
            <p class="text-muted small">Internal documents are filtered by these levels. No matching rule → allow (BRR §2.1/2.2).</p>
            <form class="border rounded p-3 mb-4" method="POST" action="{{ route('admin.downloads.acls.store') }}">
                @csrf
                <h6>Add ACL rule</h6>
                <div class="row g-2">
                    <div class="col-md-5">
                        <input class="form-control" name="path" placeholder="Internal Documents/..." required>
                    </div>
                    <div class="col-md-5">
                        <input class="form-control" name="access_levels" placeholder="-1;5;13" required>
                        <div class="form-text">Semicolon-separated legacy levels</div>
                    </div>
                    <div class="col-md-2">
                        <button class="btn btn-primary w-100" type="submit">Add</button>
                    </div>
                </div>
            </form>
            <form class="row g-2 mb-3" method="GET">
                <div class="col-md-8">
                    <input type="text" name="q" value="{{ request('q') }}" class="form-control" placeholder="Search path">
                </div>
                <div class="col-md-4">
                    <button class="btn btn-primary w-100" type="submit">Search</button>
                </div>
            </form>
            <div class="table-responsive">
                <table class="table">
                    <thead>
                        <tr>
                            <th>ID</th>
                            <th>Path</th>
                            <th>Levels</th>
                            <th>Update</th>
                        </tr>
                    </thead>
                    <tbody>
                        @forelse ($acls as $acl)
                            <tr>
                                <td>{{ $acl->id }}</td>
                                <td colspan="3">
                                    <form class="row g-2 align-items-center" method="POST" action="{{ route('admin.downloads.acls.update', $acl) }}">
                                        @csrf
                                        @method('PUT')
                                        <div class="col-md-5">
                                            <input class="form-control form-control-sm" name="path" value="{{ $acl->path }}" required>
                                        </div>
                                        <div class="col-md-5">
                                            <input class="form-control form-control-sm" name="access_levels" value="{{ implode(';', $acl->access_levels ?? []) }}" required>
                                        </div>
                                        <div class="col-md-2">
                                            <button class="btn btn-sm btn-outline-primary w-100" type="submit">Save</button>
                                        </div>
                                    </form>
                                </td>
                            </tr>
                        @empty
                            <tr><td colspan="4" class="text-muted">No ACL rows imported.</td></tr>
                        @endforelse
                    </tbody>
                </table>
            </div>
            {{ $acls->links() }}
        </div>
    </div>
@endsection