From 5919c771e9cf3c3edfc62dfb1ac6bddf1cfc9732 Mon Sep 17 00:00:00 2001
From: Florian Pritz <bluewind@xinu.at>
Date: Fri, 21 Feb 2014 23:24:01 +0100
Subject: Implement multiple access levels for api keys

This allows to use an api key to write a completly standalone client.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
---
 application/views/user/apikeys.php | 26 ++++++++++++++++++++++++--
 1 file changed, 24 insertions(+), 2 deletions(-)

(limited to 'application/views/user')

diff --git a/application/views/user/apikeys.php b/application/views/user/apikeys.php
index 872eb9ef0..2b6934c6d 100644
--- a/application/views/user/apikeys.php
+++ b/application/views/user/apikeys.php
@@ -7,6 +7,7 @@
 				<th>Key</th>
 				<th style="width: 30%;">Comment</th>
 				<th>Created on</th>
+				<th>Access</th>
 				<th></th>
 			</tr>
 		</thead>
@@ -18,10 +19,16 @@
 					<td><?php echo $item["key"]; ?></td>
 					<td><?php echo htmlentities($item["comment"]); ?></td>
 					<td><?php echo date("Y/m/d H:i", $item["created"]); ?></td>
+					<td>
+						<?php if ($item["access_level"] == "full"): ?>
+							<span class="glyphicon glyphicon-warning-sign"></span>
+						<?php endif; ?>
+						<?php echo $item["access_level"]; ?>
+					</td>
 					<td>
 						<?php echo form_open("user/delete_apikey", array("style" => "margin-bottom: 0")); ?>
-						<?php echo form_hidden("key", $item["key"]); ?>
-						<button class="btn btn-danger btn-xs" type="submit">Delete</input>
+							<?php echo form_hidden("key", $item["key"]); ?>
+							<button class="btn btn-danger btn-xs" type="submit">Delete</input>
 						</form>
 					</td>
 				</tr>
@@ -30,9 +37,24 @@
 	</table>
 </div>
 
+<h3>Access levels:</h3>
+
+<dl class="dl-horizontal">
+	<dt>basic</dt>
+	<dd>Allows uploading files.</dd>
+	<dt>apikey</dt>
+	<dd>Allows removing existing files and viewing the history. Includes <code>basic</code>.</dd>
+	<dt>full</dt>
+	<dd>Allows everything, including, but not limited to, creating and removing api keys, changing profile settings and creating invitation keys. Includes <code>apikey</code>.</dd>
+
 <p>
 	<?php echo form_open('user/create_apikey', array("class" => "form-inline")); ?>
 	<input type="text" name="comment" placeholder="Comment" class="form-control" style="width: 200px;"/>
+	<select name="access_level" class="form-control" style="width: 100px;">
+		<option>basic</option>
+		<option selected="selected">apikey</option>
+		<option>full</option>
+	</select>
 	<input class="btn btn-primary" type="submit" value="Create a new key" name="process" />
 </form>
 </p>
-- 
cgit v1.2.3-24-g4f1b