{% extends "ircpanel/base.html" %}
{% block title %}Accès & permissions{% endblock %}
{% block hero_icon %}<svg viewBox="0 0 24 24"><path d="M12 1a3 3 0 0 0-3 3v6H5a2 2 0 0 0-2 2v8a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2v-8a2 2 0 0 0-2-2h-1V7"/></svg>{% endblock %}
{% block eyebrow %}Système{% endblock %}
{% block heading %}Accès & permissions <span class="ircp-count">{{ total }}</span>{% endblock %}
{% block subtitle %}Comptes disposant de privilèges de services (lecture seule).{% endblock %}
{% block content %}
<div class="up-card uroster-card">
  <div class="acl-list">
    {% for g in grants %}
    <div class="acl-row {% if g.tier == "root" %}acl-row--root{% endif %}">
      <span class="uava is-oper"></span>
      <span class="acl-main">
        <span class="acl-name"><b>{{ g.name }}</b> <span class="ircp-tag ircp-tag--oper">{{ g.tier }}</span></span>
        <span class="acl-perms">
          {% for p in g.perms %}<span class="acl-pill">{{ p }}</span>{% endfor %}
          {% if g.perms.is_empty() %}<span class="acl-pill acl-pill--root">tous les droits</span>{% endif %}
        </span>
      </span>
      <span class="acl-by">{{ g.expires }}</span>
    </div>
    {% endfor %}
    {% if grants.is_empty() %}<div class="ircp-empty">Aucun octroi de privilège explicite (les opers sont définis dans la config).</div>{% endif %}
  </div>
</div>
{% endblock %}