web synchronized with the new changes

web/templates/pages/admin/table_definition/workspace.html

@@ -151,6 +151,35 @@
   </section>
 {% endif %}
 
+{% if !page.permission_object.is_empty() %}
+  <section class="panel">
+    <h2>Data permissions for <code>{{ page.selection.table }}</code></h2>
+    <p class="hint">These grants cover this table family. A successful change retires the current session, so you will be asked to sign in again.</p>
+    <table class="builder-table">
+      <thead><tr><th>Role</th><th>Actions</th></tr></thead>
+      <tbody>{% for role in page.role_permissions %}<tr>
+        <td>{{ role.role }}</td>
+        <td><div class="actions">{% for permission in role.actions %}
+          {% if permission.direct %}
+          <form hx-post="/admin/permissions/revoke" hx-target="#permission-status">
+            <input type="hidden" name="role" value="{{ role.role }}"><input type="hidden" name="object" value="{{ page.permission_object }}"><input type="hidden" name="action" value="{{ permission.action }}">
+            <button type="submit" class="danger">{{ permission.action }} ✓</button>
+          </form>
+          {% else if permission.effective %}
+            <span class="tag">{{ permission.action }} · inherited</span>
+          {% else %}
+          <form hx-post="/admin/permissions/grant" hx-target="#permission-status">
+            <input type="hidden" name="role" value="{{ role.role }}"><input type="hidden" name="object" value="{{ page.permission_object }}"><input type="hidden" name="action" value="{{ permission.action }}">
+            <button type="submit" class="secondary">Grant {{ permission.action }}</button>
+          </form>
+          {% endif %}
+        {% endfor %}</div></td>
+      </tr>{% endfor %}</tbody>
+    </table>
+    <div id="permission-status" aria-live="polite"></div>
+  </section>
+{% endif %}
+
 {% if page.table_is_writable() %}
   {#
     Append columns. The panel stages columns without writing anything; the