@using System.Numerics;
@inject IDbContextFactory<HBContext> dbFactory;
@implements IDialog

<Dialog HeightPixels=500 WidthPixels=900 Title="Edit permissions" @ref=dialog>
    <div class="vcontainer">
        <div class="hcontainer">
            <div>
                @if(obj?.Acl is not null) {
                    <div class="principal-select">
                        @if(editOwner is not null) {
                            <label>Owner</label>
                            <input type="text" autocomplete="off" @bind=editOwner/>
                            <button class="secondary" @onclick=@(() => editOwner = null)>Cancel</button>
                            <button @onclick=@(() => editOwner = null)>OK</button>
                        } else {
                            <label>Owner:</label>
                            <a href="javascript:;" @onclick=@(() => editOwner = obj.Owner.ToString())>
                                @obj.Owner.ToString()
                            </a>
                        }
                    </div>
                    <table class="data-table">
                        <tr>
                            <th>Action</th>
                            <th>Subject</th>
                            <th colspan="2">Permissions</th>
                        </tr>
                        @foreach(var rule in obj.Acl.Rules.OrderByDescending(r => r.Action)) {
                            <tr>
                                <td><div><AclActionSwitch InitialValue=@(rule.Action == AclRuleAction.Allow)/></div></td>
                                <td>
                                    @rule.Principal.ToString()
                                </td>
                                <td>@GetActivePermissions(rule)</td>
                                <td>
                                    <a title="Edit" href="javascript:;" @onclick=@(() => EditRule(rule))>&#x1F589</a>
                                    <a title="Delete" href="javascript:;" @onclick=@(() => RemoveRule(rule))>&#x2716</a>
                                </td>
                            </tr>
                        }
                    </table>
                    <br/>
                    <center><a href="javascript:;" @onclick=AddRule>Add new</a></center>
                } else {
                    <p><i>This item does not have any permissions set!</i></p>
                }
            </div>
            <div>
                @if(ruleToEdit is not null && permissionCheckboxes is not null) {
                    <div class="principal-select">
                        @if(editSubject is not null) {
                            <label>Subject</label>
                            <input type="text" autocomplete="off" @bind=editSubject/>
                            <button class="secondary" @onclick=@(() => editSubject = null)>Cancel</button>
                            <button @onclick=@(() => editSubject = null)>OK</button>
                        } else {
                            <label>Subject:</label>
                            <a href="javascript:;" @onclick=@(() => editSubject = ruleToEdit.Principal.ToString())>
                                @if(ruleToEdit.Principal == WellKnownSid.NullSid) {
                                    <i>Select a user or group</i>
                                } else {
                                    @ruleToEdit.Principal.ToString()
                                }
                            </a>
                        }
                    </div>
                    var permissions = Acl.GetPermissionDescriptions(obj!)
                        .OrderByDescending(kv => BitOperations.PopCount(kv.Value))
                        .ThenBy(kv => kv.Value);
                    foreach(var perm in permissionCheckboxes) {
                        <label>
                            <input
                                type="checkbox"
                                @bind=perm.Value/>
                            @perm.Description
                        </label>
                    }
                } else {
                    <p><i>Click 'Edit' next to a rule to edit it's permissions</i></p>
                }
            </div>
        </div>
        <ButtonContainer>
            <button class="secondary" @onclick=Hide>Cancel</button>
            @if(obj?.Acl is not null) {
                <button data-keyboard-shortcut="a" @onclick=Hide><u>A</u>pply</button>
            }
        </ButtonContainer>
    </div>
</Dialog>

@code {
    public bool Visible {
        get => dialog.Visible;
        set {
            dialog.Visible = value;
            if(value)
                StateHasChanged();
        }
    }

    private HBObject?             obj;
    private AclRule?              ruleToEdit;
    private PermissionCheckbox[]? permissionCheckboxes;

    private string? editOwner;
    private string? editSubject;

    private Dialog dialog;

    public void Show() => Visible = true;
    public void Hide() => Visible = false;

    public void Show(HBObject obj) {
        Object = obj;
        Show();
    }

    public HBObject? Object {
        get => obj;
        set {
            editOwner = null;
            CancelEditRule();

            if(value is null) {
                obj = null;
                return;
            }

            using var db = dbFactory.CreateDbContext();

            obj = db.Objects
                .Include(o => o.Acl)
                .First(o => o.ObjectId == value.ObjectId);

            if(obj.Acl is not null)
                db.Entry(obj.Acl).Collection(a => a.Rules).Load();
        }
    }

    private string GetActivePermissions(AclRule rule) {
        var perms = Acl.GetPermissionDescriptions(obj!)
            .Where(kv => (rule.Permissions & kv.Value) == kv.Value)
            .ToList();

        // Filter the list of matching permissions to include the
        // most relevant encapsulation permissions only. E.g. if
        // 'Full access' includes 'Read' and 'Write', then only
        // show 'Full access'.
        List<int> toRemove = new();
        for(int i = 0; i < perms.Count(); i++)
            for(int j = 0; j < perms.Count(); j++)
                if(i != j)
                    if((perms[i].Value & perms[j].Value) == perms[i].Value)
                        toRemove.Add(i);
        toRemove = toRemove.Order().Distinct().ToList();
        for(int i = toRemove.Count() - 1; i >= 0; i--)
            perms.RemoveAt(toRemove[i]);

        return string.Join(", ", perms
            .OrderByDescending(kv => BitOperations.PopCount(kv.Value))
            .ThenBy(kv => kv.Value)
            .Select(kv => kv.Key));
    }

    private void AddRule() {
        var rule = new AclRule() {
            Principal   = WellKnownSid.NullSid,
            Action      = AclRuleAction.Allow,
            Permissions = 0
        };

        obj!.Acl!.Rules.Add(rule);
        EditRule(rule);
    }

    private void RemoveRule(AclRule rule) {
        if(rule == ruleToEdit)
            CancelEditRule();
        obj!.Acl!.Rules.Remove(rule);
    }

    private void EditRule(AclRule rule) {
        ruleToEdit           = rule;
        editSubject          = null;
        permissionCheckboxes = Acl.GetPermissionDescriptions(obj!)
            .OrderByDescending(kv => BitOperations.PopCount(kv.Value))
            .ThenBy(kv => kv.Value)
            .Select(kv => new PermissionCheckbox(rule, kv))
            .ToArray();
    }

    private void CancelEditRule() {
        ruleToEdit           = null;
        permissionCheckboxes = null;
    }

    private class PermissionCheckbox {
        public string Description { get; private init; }

        private AclRule rule;
        private ulong   mask;

        public PermissionCheckbox(AclRule rule, KeyValuePair<string, ulong> kv) {
            this.rule   = rule;
            this.mask   = kv.Value;
            Description = kv.Key;
        }

        public bool Value {
            get => (rule.Permissions & mask) == mask;
            set {
                if(value)
                    rule.Permissions |= mask;
                else
                    rule.Permissions &= ~mask;
            }
        }
    }
}