diff --git a/atst/forms/portfolio_member.py b/atst/forms/portfolio_member.py index 36e0d3cd..492777a7 100644 --- a/atst/forms/portfolio_member.py +++ b/atst/forms/portfolio_member.py @@ -1,4 +1,4 @@ -from wtforms.fields import StringField +from wtforms.fields import StringField, FormField, FieldList from wtforms.fields.html5 import EmailField from wtforms.validators import Required, Email, Length @@ -10,6 +10,7 @@ from atst.utils.localization import translate class PermissionsForm(BaseForm): + member = StringField() perms_app_mgmt = SelectField( None, choices=[ @@ -50,6 +51,10 @@ class PermissionsForm(BaseForm): return _data +class MembersPermissionsForm(BaseForm): + members_permissions = FieldList(FormField(PermissionsForm)) + + class EditForm(PermissionsForm): # This form also accepts a field for each environment in each application # that the user is a member of diff --git a/atst/routes/portfolios/index.py b/atst/routes/portfolios/index.py index 6aadb012..592792b0 100644 --- a/atst/routes/portfolios/index.py +++ b/atst/routes/portfolios/index.py @@ -8,9 +8,10 @@ from atst.domain.portfolios import Portfolios from atst.domain.audit_log import AuditLog from atst.domain.common import Paginator from atst.forms.portfolio import PortfolioForm +from atst.forms.portfolio_member import MembersPermissionsForm +from atst.models.permissions import Permissions from atst.domain.permission_sets import PermissionSets from atst.domain.authz.decorator import user_can_access_decorator as user_can -from atst.models.permissions import Permissions @portfolios_bp.route("/portfolios") @@ -23,27 +24,53 @@ def portfolios(): return render_template("portfolios/blank_slate.html") -def serialize_member(member): +def permission_str(member, edit_perm_set, view_perm_set): + if member.has_permission_set(edit_perm_set): + return edit_perm_set + else: + return view_perm_set + + +def serialize_member_form_data(member): return { - "member": member, - "app_mgmt": member.has_permission_set( - PermissionSets.EDIT_PORTFOLIO_APPLICATION_MANAGEMENT + "member": member.user.full_name, + "perms_app_mgmt": permission_str( + member, + PermissionSets.EDIT_PORTFOLIO_APPLICATION_MANAGEMENT, + PermissionSets.VIEW_PORTFOLIO_APPLICATION_MANAGEMENT, ), - "funding": member.has_permission_set(PermissionSets.EDIT_PORTFOLIO_FUNDING), - "reporting": member.has_permission_set(PermissionSets.EDIT_PORTFOLIO_REPORTS), - "portfolio_mgmt": member.has_permission_set( - PermissionSets.EDIT_PORTFOLIO_ADMIN + "perms_funding": permission_str( + member, + PermissionSets.EDIT_PORTFOLIO_FUNDING, + PermissionSets.VIEW_PORTFOLIO_FUNDING, + ), + "perms_reporting": permission_str( + member, + PermissionSets.EDIT_PORTFOLIO_REPORTS, + PermissionSets.VIEW_PORTFOLIO_REPORTS, + ), + "perms_portfolio_mgmt": permission_str( + member, + PermissionSets.EDIT_PORTFOLIO_ADMIN, + PermissionSets.VIEW_PORTFOLIO_ADMIN, ), } -def render_admin_page(portfolio, form): +def render_admin_page(portfolio, form=None): pagination_opts = Paginator.get_pagination_opts(http_request) audit_events = AuditLog.get_portfolio_events(portfolio, pagination_opts) - members_data = [serialize_member(member) for member in portfolio.members] + members_data = [serialize_member_form_data(member) for member in portfolio.members] + + portfolio_form = PortfolioForm(data={"name": portfolio.name}) + permissions_form = MembersPermissionsForm( + data={"members_permissions": members_data} + ) return render_template( "portfolios/admin.html", form=form, + portfolio_form=portfolio_form, + permissions_form=permissions_form, portfolio=portfolio, audit_events=audit_events, user=g.current_user, @@ -55,8 +82,7 @@ def render_admin_page(portfolio, form): @user_can(Permissions.VIEW_PORTFOLIO_ADMIN, message="view portfolio admin page") def portfolio_admin(portfolio_id): portfolio = Portfolios.get_for_update(portfolio_id) - form = PortfolioForm(data={"name": portfolio.name}) - return render_admin_page(portfolio, form) + return render_admin_page(portfolio) @portfolios_bp.route("/portfolios//edit", methods=["POST"]) diff --git a/styles/components/_portfolio_layout.scss b/styles/components/_portfolio_layout.scss index 6d09bfa2..bd6e6429 100644 --- a/styles/components/_portfolio_layout.scss +++ b/styles/components/_portfolio_layout.scss @@ -197,8 +197,6 @@ } table { - box-shadow: 0 6px 18px 0 rgba(144,164,183,0.3); - thead { th:first-child { padding-left: 3 * $gap; @@ -266,6 +264,14 @@ font-size: 1.2rem; } } + + .usa-input.usa-input--success { + margin: 0; + } + + select { + border: none; + } } .add-member-link { diff --git a/templates/components/options_input.html b/templates/components/options_input.html index d2b52e07..bda1805b 100644 --- a/templates/components/options_input.html +++ b/templates/components/options_input.html @@ -1,7 +1,7 @@ {% from "components/icon.html" import Icon %} {% from "components/tooltip.html" import Tooltip %} -{% macro OptionsInput(field, tooltip, inline=False) -%} +{% macro OptionsInput(field, tooltip, inline=False, label=True) -%}
- -
- {{ field.label | striptags}} - {% if tooltip %}{{ Tooltip(tooltip) }}{% endif %} -
+ {% if label %} + +
+ {{ field.label | striptags}} + {% if tooltip %}{{ Tooltip(tooltip) }}{% endif %} +
- {% if field.description %} - {{ field.description | safe }} - {% endif %} + {% if field.description %} + {{ field.description | safe }} + {% endif %} - {{ Icon('alert',classes="icon-validation") }} - {{ Icon('ok',classes="icon-validation") }} -
+ {{ Icon('alert',classes="icon-validation") }} + {{ Icon('ok',classes="icon-validation") }} +
+ {% endif %} {{ field() }} diff --git a/templates/fragments/admin/portfolio_members.html b/templates/fragments/admin/portfolio_members.html index 29e87503..e7babb0f 100644 --- a/templates/fragments/admin/portfolio_members.html +++ b/templates/fragments/admin/portfolio_members.html @@ -1,4 +1,5 @@ {% from "components/icon.html" import Icon %} +{% from "components/options_input.html" import OptionsInput %}
@@ -37,31 +38,27 @@ - {% for member_data in members_data %} - - {{ member_data.member.user_name }} - {% if member_data.member.user == user %} + {% for subform in permissions_form.members_permissions %} + + {{ subform.member.data }} + {% if subform.member.data == user.full_name %} (you) {% set archive_button_class = 'usa-button-disabled' %} {% else %} {% set archive_button_class = 'usa-button-secondary' %} {% endif %} - {% set heading_perms = [member_data.app_mgmt, member_data.funding, member_data.reporting, member_data.portfolio_mgmt] %} - {% for has_perm in heading_perms %} - {% if has_perm %} - Edit Access - {% else %} - View Only - {% endif %} - {% endfor %} - - - + {{ OptionsInput(subform.perms_app_mgmt, label=False) }} + {{ OptionsInput(subform.perms_funding, label=False) }} + {{ OptionsInput(subform.perms_reporting, label=False) }} + {{ OptionsInput(subform.perms_portfolio_mgmt, label=False) }} + + {% endfor %} + @@ -69,6 +66,6 @@
-{% endif %} + {% endif %}
diff --git a/templates/portfolios/admin.html b/templates/portfolios/admin.html index 25c3f445..2f0614a8 100644 --- a/templates/portfolios/admin.html +++ b/templates/portfolios/admin.html @@ -14,13 +14,14 @@
+ {% if user_can(permissions.VIEW_PORTFOLIO_NAME) %} -
- {{ form.csrf_token }} -
-
- {{ TextInput(form.name, validation="portfolioName") }} -
+ + {{ portfolio_form.csrf_token }} +
+
+ {{ TextInput(portfolio_form.name, validation="portfolioName") }} +
diff --git a/translations.yaml b/translations.yaml index cb3e9102..67f1335d 100644 --- a/translations.yaml +++ b/translations.yaml @@ -138,6 +138,7 @@ forms: last_name_label: Last Name portfolio_role_description: 'The portfolio role controls whether a member is permitted to organize a portfolio into applications and environments, add members to this portfolio, and view billing information.' portfolio_role_label: Portfolio Role + access: Access Level new_request: am_poc_label: I am the Portfolio Owner average_daily_traffic_description: What is the average daily traffic you expect the systems under this cloud contract to use? @@ -575,6 +576,8 @@ portfolios: funding: Funding reporting: Reporting portfolio_mgmt: Portfolio Mgmt + view_only: View Only + edit_access: Edit Access testing: example_string: Hello World example_with_variables: 'Hello, {name}!'