@extends('layouts.app')

@section('content')
<style>
/* Grayed out placeholder options */
select option[value=""] {
    color: #6c757d !important;
    font-style: italic;
}

select option[value=""]:disabled {
    color: #6c757d !important;
    background-color: #f8f9fa !important;
}

select:invalid {
    color: #6c757d;
}

select:valid {
    color: #212529;
}
</style>
<div class="container">
    <div class="row justify-content-center">
        <div class="col-md-8" style="margin-left: 220px;">
            <h2>Edit User Details</h2>
            <form method="POST" action="{{ url('/user/update/' . $user->id) }}">
                @csrf
                @method('PUT')
                <div class="mb-3">
                    <label for="name" class="form-label">Name</label>
                    <input type="text" class="form-control" id="name" name="name" value="{{ $user->name }}" required>
                </div>
                <div class="mb-3">
                    <label for="username" class="form-label">Username</label>
                    <input type="text" class="form-control" id="username" name="username" value="{{ $user->username }}" required>
                </div>
                <div class="mb-3">
                    <label for="password" class="form-label">New Password (leave blank to keep current)</label>
                    <input type="password" class="form-control" id="password" name="password">
                </div>
                <button type="submit" class="btn btn-success">Update User</button>
            </form>

            <hr>
            <h3>Designation, Branch & Unit</h3>
            <form method="POST" action="{{ url('/user/update-department-designation/' . $user->id) }}">
                @csrf
                <div class="mb-3">
                    <label for="designation" class="form-label">Designation</label>
                    <select class="form-control" id="designation" name="designation" required>
                        @php
                            $designations = [
                                "Chief Operating Officer",
                                "Driver Cum Admin",
                                "Barista - Part Time",
                                "Barista - Full Time",
                                "Technician",
                                "Internship",
                                "Data Entry Clerk",
                                "Assistant IT Cum Data Entry Clerk",
                                "Supervisor",
                                "Digital Marketing Executive",
                                "Tender Administration & Sales Coordinator",
                                "PMO",
                                "HR Clerk",
                                "Admin Clerk",
                                "General Manager",
                                "Account Executive",
                                "Executive Director",
                                "Senior General Manager",
                                "Head of Operation Division",
                                "Senior Manager STD",
                                "Supervisor IRM",
                                "Manager Unit PMO",
                                "Manager IRM",
                                "Senior Executive Admin",
                                "Operation Manager",
                                "Head of Corporate Division"
                            ];
                        @endphp
                        @foreach($designations as $designation)
                            <option value="{{ $designation }}" {{ $user->designation == $designation ? 'selected' : '' }}>
                                {{ $designation }}
                                @if(strtolower($designation) === 'pmo')
                                    (Auto-assigns PMO role)
                                @endif
                            </option>
                        @endforeach
                    </select>
                    <small class="text-muted">
                        <i class="fas fa-info-circle"></i> 
                        <strong>PMO:</strong> Auto-assigns PMO role for Project workflow.
                        <br><strong>Head of Operation Division:</strong> Used for Project approval workflow.
                        <br><strong>Head of Corporate Division:</strong> Used for Asset approval workflow.
                    </small>
                </div>
                <div class="mb-3">
                    <label for="branch_id" class="form-label">Branch (Optional)</label>
                    <select class="form-control" id="branch_id" name="branch_id" onchange="updateUnits()">
                        <option value="" disabled selected>Select Branch</option>
                        @foreach($branches as $branch)
                            <option value="{{ $branch->id }}" {{ $user->branch_id == $branch->id ? 'selected' : '' }}>
                                {{ $branch->name }}
                            </option>
                        @endforeach
                    </select>
                </div>
                <div class="mb-3" id="unit_field" style="{{ $user->branch_id == 3 ? 'display: none;' : '' }}">
                    <label for="unit_id" class="form-label">Unit (Optional)</label>
                    <select class="form-control" id="unit_id" name="unit_id">
                        <option value="" disabled selected>Select Unit</option>
                        <!-- Units will be populated by JavaScript -->
                    </select>
                    <small class="text-muted">
                        <i class="fas fa-info-circle"></i> 
                        <strong>IT Department:</strong> Used for Asset approval workflow.
                        <br><strong>Finance:</strong> Automatically assigns Approver role.
                    </small>
                </div>
                <button type="submit" class="btn btn-primary">Update Designation, Branch & Unit</button>
            </form>

            <hr>
            <h3>Role Status</h3>
            <div class="card">
                <div class="card-body">
                    <div class="row">
                        <div class="col-md-6">
                            <h6><i class="fas fa-user-check"></i> Approver Status</h6>
                            <span class="badge {{ $user->is_approver ? 'badge-success' : 'badge-secondary' }}">
                                {{ $user->is_approver ? 'Yes' : 'No' }}
                            </span>
                            @if($user->is_approver)
                                <br><small class="text-success">Can approve and reject all requests (final decision authority)</small>
                                @if($user->unit_id == 6)
                                    <br><small class="text-info"><i class="fas fa-star"></i> Auto-assigned (Finance unit)</small>
                                @endif
                            @else
                                <br><small class="text-muted">Can only reject and approve & escalate requests</small>
                            @endif
                        </div>
                        <div class="col-md-6">
                            <h6><i class="fas fa-project-diagram"></i> PMO Status</h6>
                            <span class="badge {{ $user->isPMO() ? 'badge-info' : 'badge-secondary' }}">
                                {{ $user->isPMO() ? 'Yes' : 'No' }}
                            </span>
                            @if($user->isPMO())
                                <br><small class="text-info">Special workflow rules for project requests</small>
                            @else
                                <br><small class="text-muted">Standard workflow rules apply</small>
                            @endif
                        </div>
                    </div>
                </div>
            </div>

            <hr>
            <h3>Approver Role</h3>
            @if($user->unit_id == 6)
                <div class="alert alert-info">
                    <i class="fas fa-info-circle"></i> 
                    <strong>Finance Unit Auto-Assignment:</strong> Users in Finance unit are automatically assigned Approver role and cannot have it removed through this form.
                    To change this user's approver status, first change their unit in the section above.
                </div>
            @endif
            <form method="POST" action="{{ url('/user/update-approver-role/' . $user->id) }}">
                @csrf
                <div class="mb-3">
                    <label class="form-label">Is this user an Approver?</label>
                    <div class="form-check">
                        <input class="form-check-input" type="radio" 
                               id="approver_yes" name="is_approver" value="1"
                               {{ $user->is_approver ? 'checked' : '' }}
                               {{ $user->unit_id == 6 ? 'disabled' : '' }}>
                        <label class="form-check-label" for="approver_yes">
                            <i class="fas fa-check-circle text-success"></i> Yes - Can Approve and Reject requests (final decision authority)
                        </label>
                    </div>
                    <div class="form-check">
                        <input class="form-check-input" type="radio" 
                               id="approver_no" name="is_approver" value="0"
                               {{ !$user->is_approver ? 'checked' : '' }}
                               {{ $user->unit_id == 6 ? 'disabled' : '' }}>
                        <label class="form-check-label" for="approver_no">
                            <i class="fas fa-times-circle text-warning"></i> No - Can only Reject and Approve & Escalate requests
                        </label>
                    </div>
                    <small class="text-muted">
                        <i class="fas fa-info-circle"></i> 
                        All users except Approvers can reject and approve & escalate requests. Only users marked as "Approver" can make final approve/reject decisions.
                        <br><strong>Auto-Assignment:</strong> Users in Finance unit are automatically assigned Approver role.
                        <br><strong>Workflow Rules:</strong>
                        <br>• <strong>Asset:</strong> User → Others → IT Department → Head of Corporate → Approver
                        <br>• <strong>Project:</strong> User → Others → PMO → Head of Operations → Approver
                        <br>• <strong>Overwrite:</strong> User → Multiple Users → Approver
                        <br>• <strong>Special Roles:</strong> IT Department, PMO, Head divisions have specific escalation rules
                        <br>• <strong>Final Stage:</strong> Approvers cannot be bypassed and must make the final decision
                    </small>
                </div>
                <button type="submit" class="btn btn-success" {{ $user->unit_id == 6 ? 'disabled' : '' }}>Update Approver Role</button>
            </form>

            <hr>
            <h3>Access Control Permissions</h3>
            <form method="POST" action="{{ url('/user/update-permissions/' . $user->id) }}">
                @csrf
                <div class="row">
                    <div class="col-md-12">
                        <h5 class="text-primary">Project Permissions</h5>
                        <div class="mb-3">
                            <div class="form-check">
                                <input class="form-check-input" type="checkbox" 
                                       id="can_create_project" name="can_create_project" 
                                       {{ $user->can_create_project ? 'checked' : '' }}>
                                <label class="form-check-label" for="can_create_project">
                                    <i class="fas fa-plus-circle text-success"></i> Create Project
                                </label>
                            </div>
                        </div>
                        <div class="mb-3">
                            <div class="form-check">
                                <input class="form-check-input" type="checkbox" 
                                       id="can_view_project" name="can_view_project"
                                       {{ $user->can_view_project ? 'checked' : '' }}>
                                <label class="form-check-label" for="can_view_project">
                                    <i class="fas fa-eye text-info"></i> View Project
                                </label>
                            </div>
                        </div>
                        <div class="mb-3">
                            <div class="form-check">
                                <input class="form-check-input" type="checkbox" 
                                       id="can_edit_project" name="can_edit_project"
                                       {{ $user->can_edit_project ? 'checked' : '' }}>
                                <label class="form-check-label" for="can_edit_project">
                                    <i class="fas fa-edit text-warning"></i> Edit Project
                                </label>
                            </div>
                        </div>
                        <small class="text-muted">
                            <i class="fas fa-info-circle"></i> 
                            Users need at least one project permission to access the Project section.
                        </small>
                    </div>
                </div>
                <button type="submit" class="btn btn-success">
                    <i class="fas fa-save"></i> Update Permissions
                </button>
            </form>

            {{-- Admin Control Privileges System --}}
            <hr>
            <h3><i class="fas fa-crown text-warning"></i> Admin Control Privileges</h3>
            <div class="alert alert-info">
                <i class="fas fa-info-circle"></i> 
                <strong>Admin Control System:</strong> Grant users elevated privileges for system-wide request management. Choose the appropriate control level based on the user's responsibilities and role requirements.
            </div>
            
            <form method="POST" action="{{ url('/user/update-admin-control/' . $user->id) }}">
                @csrf
                <div class="mb-4">
                    <label class="form-label"><strong>Select Admin Control Level for {{ $user->role }} User:</strong></label>
                    
                    {{-- Option 1: View All Requests Only --}}
                    <div class="card mb-3">
                        <div class="card-body">
                            <div class="form-check">
                                <input class="form-check-input" type="radio" 
                                       id="admin_control_view_only" name="admin_control_level" value="view_only"
                                       {{ $user->admin_control_level === 'view_only' ? 'checked' : '' }}>
                                <label class="form-check-label" for="admin_control_view_only">
                                    <strong><i class="fas fa-eye text-info"></i> 🔍 Option 1: View All Requests Only</strong>
                                </label>
                            </div>
                            <div class="mt-2 ps-4">
                                <h6 class="text-success">✅ Permissions Granted:</h6>
                                <ul class="text-success mb-2">
                                    <li>View all requests system-wide (all departments, all users)</li>
                                    <li>Access request details, attachments, and documents</li>
                                    <li>View complete approval history and comments</li>
                                    <li>Generate and export reports on any request</li>
                                    <li>Search and filter across all requests</li>
                                    <li>Download PDFs and attachments</li>
                                    <li>View approval workflow and status</li>
                                </ul>
                                
                                <h6 class="text-danger">❌ Restrictions:</h6>
                                <ul class="text-danger mb-2">
                                    <li>Cannot approve, reject, or escalate</li>
                                    <li>Cannot add comments or take any action</li>
                                    <li>Cannot edit request details</li>
                                    <li>Cannot request resubmission</li>
                                    <li>Read-only access to everything</li>
                                </ul>
                                
                                <small class="text-muted">
                                    <strong>Use Case:</strong> Auditors, compliance officers, staff members, or users from any role who need complete oversight without any decision-making power. Perfect for monitoring, reporting, and review purposes across all departments.
                                </small>
                            </div>
                        </div>
                    </div>
                    
                    {{-- Option 2: Full Admin Control --}}
                    <div class="card mb-3">
                        <div class="card-body">
                            <div class="form-check">
                                <input class="form-check-input" type="radio" 
                                       id="admin_control_full" name="admin_control_level" value="full_control"
                                       {{ $user->admin_control_level === 'full_control' ? 'checked' : '' }}>
                                <label class="form-check-label" for="admin_control_full">
                                    <strong><i class="fas fa-shield-alt text-warning"></i> 🛡️ Option 2: Full Admin Control</strong>
                                </label>
                            </div>
                            <div class="mt-2 ps-4">
                                <h6 class="text-success">✅ Permissions Granted:</h6>
                                <ul class="text-success mb-2">
                                    <li>Everything from "View All Requests"</li>
                                    <li><strong>Complete request management capabilities:</strong></li>
                                    <li class="ms-3">• Approve any request at any approval level</li>
                                    <li class="ms-3">• Reject permanently with mandatory reason</li>
                                    <li class="ms-3">• Reject & Request Resubmission - return to requester for corrections</li>
                                    <li class="ms-3">• Escalate requests to higher authority</li>
                                    <li class="ms-3">• Add comments and notes to any request</li>
                                    <li class="ms-3">• View version comparisons for resubmitted requests</li>
                                    <li class="ms-3">• Set resubmission deadlines</li>
                                    <li class="ms-3">• Override normal approval workflows</li>
                                    <li class="ms-3">• Approve requests from any department</li>
                                    <li class="ms-3">• Full decision-making authority</li>
                                </ul>
                                
                                <h6 class="text-danger">❌ Restrictions:</h6>
                                <ul class="text-danger mb-2">
                                    <li>Cannot delete requests permanently (data integrity)</li>
                                    <li>Cannot modify other users' roles or permissions</li>
                                    <li>Cannot access system configuration/settings pages</li>
                                    <li>Cannot create/delete user accounts</li>
                                </ul>
                                
                                <small class="text-muted">
                                    <strong>Use Case:</strong> Senior staff, acting administrators, team leads, supervisors, or users from any role who need complete request management capabilities. This is the highest level of user privilege short of full system administrator access.
                                </small>
                            </div>
                        </div>
                    </div>
                    
                    {{-- Option 3: No Admin Control (Default) --}}
                    <div class="card mb-3">
                        <div class="card-body">
                            <div class="form-check">
                                <input class="form-check-input" type="radio" 
                                       id="admin_control_none" name="admin_control_level" value="none"
                                       {{ $user->admin_control_level === 'none' || !$user->admin_control_level ? 'checked' : '' }}>
                                <label class="form-check-label" for="admin_control_none">
                                    <strong><i class="fas fa-user text-secondary"></i> No Admin Control (Default)</strong>
                                </label>
                            </div>
                            <div class="mt-2 ps-4">
                                <small class="text-muted">
                                    Standard user permissions apply. User can only access requests they created or are assigned to approve based on their department and role.
                                </small>
                            </div>
                        </div>
                    </div>
                </div>
                
                <button type="submit" class="btn btn-warning">
                    <i class="fas fa-crown"></i> Update Admin Control Privileges
                </button>
            </form>
        </div>
    </div>
</div>

<script>
// Units data organized by branch
const unitsByBranch = {!! $unitsByBranchJson !!};
const currentUserUnitId = {{ $user->unit_id ?? 'null' }};
const currentUserBranchId = {{ $user->branch_id ?? 'null' }};

function updateUnits() {
    const branchSelect = document.getElementById('branch_id');
    const unitField = document.getElementById('unit_field');
    const unitSelect = document.getElementById('unit_id');
    const selectedBranchId = parseInt(branchSelect.value);
    
    // Clear current options
    unitSelect.innerHTML = '<option value="" disabled selected>Select Unit</option>';
    
    if (selectedBranchId === 3) {
        // Marketing & Sales - hide unit field
        unitField.style.display = 'none';
        unitSelect.value = '';
    } else if (selectedBranchId && unitsByBranch[selectedBranchId]) {
        // Show unit field and populate with branch-specific units
        unitField.style.display = 'block';
        
        unitsByBranch[selectedBranchId].forEach(function(unit) {
            const option = document.createElement('option');
            option.value = unit.id;
            option.textContent = unit.name;
            
            // Keep current selection if it matches and belongs to this branch
            if (currentUserUnitId && currentUserUnitId === unit.id) {
                option.selected = true;
            }
            
            unitSelect.appendChild(option);
        });
    } else {
        // No branch selected - show field but no options
        unitField.style.display = 'block';
    }
}

// Initialize units on page load
document.addEventListener('DOMContentLoaded', function() {
    updateUnits();
});
</script>
@endsection