summaryrefslogtreecommitdiffstats
path: root/application/views/user
diff options
context:
space:
mode:
authorFlorian Pritz <bluewind@xinu.at>2014-02-21 23:24:01 +0100
committerFlorian Pritz <bluewind@xinu.at>2014-02-21 23:24:01 +0100
commit5919c771e9cf3c3edfc62dfb1ac6bddf1cfc9732 (patch)
treec774ace3303c3dd4c232f49136118014271e2ca2 /application/views/user
parentaea9987a38715da82291f87129b1a3047e5c9849 (diff)
Implement multiple access levels for api keys
This allows to use an api key to write a completly standalone client. Signed-off-by: Florian Pritz <bluewind@xinu.at>
Diffstat (limited to 'application/views/user')
-rw-r--r--application/views/user/apikeys.php26
1 files changed, 24 insertions, 2 deletions
diff --git a/application/views/user/apikeys.php b/application/views/user/apikeys.php
index 872eb9ef0..2b6934c6d 100644
--- a/application/views/user/apikeys.php
+++ b/application/views/user/apikeys.php
@@ -7,6 +7,7 @@
<th>Key</th>
<th style="width: 30%;">Comment</th>
<th>Created on</th>
+ <th>Access</th>
<th></th>
</tr>
</thead>
@@ -19,9 +20,15 @@
<td><?php echo htmlentities($item["comment"]); ?></td>
<td><?php echo date("Y/m/d H:i", $item["created"]); ?></td>
<td>
+ <?php if ($item["access_level"] == "full"): ?>
+ <span class="glyphicon glyphicon-warning-sign"></span>
+ <?php endif; ?>
+ <?php echo $item["access_level"]; ?>
+ </td>
+ <td>
<?php echo form_open("user/delete_apikey", array("style" => "margin-bottom: 0")); ?>
- <?php echo form_hidden("key", $item["key"]); ?>
- <button class="btn btn-danger btn-xs" type="submit">Delete</input>
+ <?php echo form_hidden("key", $item["key"]); ?>
+ <button class="btn btn-danger btn-xs" type="submit">Delete</input>
</form>
</td>
</tr>
@@ -30,9 +37,24 @@
</table>
</div>
+<h3>Access levels:</h3>
+
+<dl class="dl-horizontal">
+ <dt>basic</dt>
+ <dd>Allows uploading files.</dd>
+ <dt>apikey</dt>
+ <dd>Allows removing existing files and viewing the history. Includes <code>basic</code>.</dd>
+ <dt>full</dt>
+ <dd>Allows everything, including, but not limited to, creating and removing api keys, changing profile settings and creating invitation keys. Includes <code>apikey</code>.</dd>
+
<p>
<?php echo form_open('user/create_apikey', array("class" => "form-inline")); ?>
<input type="text" name="comment" placeholder="Comment" class="form-control" style="width: 200px;"/>
+ <select name="access_level" class="form-control" style="width: 100px;">
+ <option>basic</option>
+ <option selected="selected">apikey</option>
+ <option>full</option>
+ </select>
<input class="btn btn-primary" type="submit" value="Create a new key" name="process" />
</form>
</p>