{% extends 'app_base.html' %}{% block content %}
<div class="toolbar"><div class="page-head" style="margin:0"><h1>Usuários e permissões</h1><p>O administrador gerencia os usuários da própria empresa. A senha atual nunca é exibida nem gravada em texto puro.</p></div><button class="btn btn-primary" onclick="openDialog('newUser')"><span class="material-symbols-outlined">person_add</span>Novo usuário</button></div>
<div class="stack">{% for u in users %}<section class="card form-section"><div class="record-head"><div><h3 style="margin:0">{{ u.name }}</h3><div class="muted">{{ u.email }} · {{ u.role|upper }}{% if u.professional_id %} · vínculo clínico ativo{% endif %}</div></div><div class="actions"><span class="badge {{ 'badge-success' if u.active else 'status-cancel' }}">{{ 'Ativo' if u.active else 'Inativo' }}</span><button class="btn btn-soft btn-sm" onclick="openDialog('edit-{{ u.id }}')">Editar</button>{% if u.id != session_user.user_id %}<form method="post" action="{{ url_for('clinic.user_toggle',uid=u.id) }}"><button class="btn btn-warn btn-sm">{{ 'Desativar' if u.active else 'Ativar' }}</button></form>{% endif %}{% if u.id != session_user.user_id %}<form method="post" action="{{ url_for('clinic.user_delete',uid=u.id) }}"><button type="button" class="btn btn-danger btn-sm" onclick="confirmSubmit(this.form,'Excluir este usuário?')">Excluir</button></form>{% endif %}</div></div>{% if u.role!='admin' %}<form method="post" action="{{ url_for('clinic.user_permissions',user_id=u.id) }}"><div class="grid-3" style="margin-top:16px">{% for key,m in module_catalog.items() %}{% if key in clinic.enabled_modules and key not in ['patient_portal','telemedicine','online_payment'] %}<label class="checkrow compact"><input type="checkbox" name="permissions" value="{{ key }}" {{ 'checked' if key in u.permissions }}><span>{{ m.label }}</span></label>{% endif %}{% endfor %}</div><div style="margin-top:12px"><button class="btn btn-soft btn-sm">Salvar permissões</button></div></form>{% else %}<div class="notice" style="margin-top:14px">Administrador recebe automaticamente os módulos operacionais liberados pelo Desenvolvedor.</div>{% endif %}</section>{% else %}<div class="card empty">Nenhum usuário cadastrado.</div>{% endfor %}</div>
<dialog id="newUser" class="dialog"><form method="post"><div class="dialog-head"><h2>Novo usuário</h2><button type="button" class="icon-btn" onclick="closeDialog('newUser')">×</button></div><div class="dialog-body"><div class="grid-2"><div><label class="label">Nome</label><input class="input" name="name" required></div><div><label class="label">E-mail</label><input class="input" type="email" name="email" required></div><div><label class="label">Senha provisória</label><input class="input" type="password" name="password" minlength="8" required><small class="muted">Nunca será gravada em texto puro no Firestore.</small></div><div><label class="label">CPF/Documento</label><input class="input" name="document"></div><div><label class="label">Telefone</label><input class="input" name="phone"></div><div><label class="label">Perfil</label><select class="input" name="role"><option value="reception">Recepção</option><option value="professional">Profissional</option><option value="finance">Financeiro</option><option value="manager">Gerente</option><option value="admin">Administrador</option></select></div><div><label class="label">Vincular ao profissional</label><select class="input" name="professional_id"><option value="">Não vinculado</option>{% for p in professionals if p.status!='INATIVO' %}<option value="{{ p.id }}">{{ p.name }} · {{ p.specialty or 'Profissional' }}</option>{% endfor %}</select><div class="muted">Obrigatório para perfil Profissional. O acesso clínico será limitado à própria agenda/pacientes vinculados.</div></div></div><h3 style="margin-top:20px">Permissões iniciais</h3><div class="grid-3">{% for key,m in module_catalog.items() %}{% if key in clinic.enabled_modules and key not in ['patient_portal','telemedicine','online_payment'] %}<label class="checkrow compact"><input type="checkbox" name="permissions" value="{{ key }}"><span>{{ m.label }}</span></label>{% endif %}{% endfor %}</div></div><div class="dialog-actions"><button type="button" class="btn btn-soft" onclick="closeDialog('newUser')">Cancelar</button><button class="btn btn-primary">Criar usuário</button></div></form></dialog>
{% for u in users %}<dialog id="edit-{{ u.id }}" class="dialog"><form method="post" action="{{ url_for('clinic.user_edit',uid=u.id) }}"><div class="dialog-head"><h2>Editar usuário</h2><button type="button" class="icon-btn" onclick="closeDialog('edit-{{ u.id }}')">×</button></div><div class="dialog-body"><div class="grid-2"><div><label class="label">Nome</label><input class="input" name="name" value="{{ u.name }}" required></div><div><label class="label">E-mail</label><input class="input" type="email" name="email" value="{{ u.email }}" required></div><div><label class="label">Nova senha provisória (opcional)</label><input class="input" type="password" name="password" minlength="8"><small class="muted">A senha atual não pode ser visualizada. Ao informar uma nova, ela é atualizada no Firebase Auth e somente o hash local é mantido no Desktop.</small></div><div><label class="label">CPF/Documento</label><input class="input" name="document" value="{{ u.document or '' }}"></div><div><label class="label">Telefone</label><input class="input" name="phone" value="{{ u.phone or '' }}"></div><div><label class="label">Perfil</label><select class="input" name="role" {{ 'disabled' if u.id==session_user.user_id }}>{% for role in ['reception','professional','finance','manager','admin'] %}<option value="{{ role }}" {{ 'selected' if u.role==role }}>{{ role|capitalize }}</option>{% endfor %}</select></div><div><label class="label">Vincular ao profissional</label><select class="input" name="professional_id"><option value="">Não vinculado</option>{% for p in professionals if p.status!='INATIVO' %}<option value="{{ p.id }}" {{ 'selected' if u.professional_id==p.id }}>{{ p.name }} · {{ p.specialty or 'Profissional' }}</option>{% endfor %}</select><input type="hidden" name="data_scope" value="{{ 'assigned' if u.role=='professional' else (u.data_scope or 'clinic') }}"></div></div></div><div class="dialog-actions"><button type="button" class="btn btn-soft" onclick="closeDialog('edit-{{ u.id }}')">Cancelar</button><button class="btn btn-primary">Salvar</button></div></form></dialog>{% endfor %}
{% endblock %}