@girder/core 5.0.0-beta.1 → 5.0.0

package/dist-lib/src/templates/body/systemConfiguration.pug

@@ -0,0 +1,215 @@
+.g-body-title System configuration
+.g-body-subtitle
+  p
+    | Note: all settings other than those referencing data in the database should be set as
+    | environment variables in the execution environment.
+form.g-settings-form(role="form")
+  .g-settings-form-container
+    h4 Instance Branding
+    .form-group
+      label(for="g-core-brand-name") Brand Name
+      input#g-core-brand-name.form-control.input-sm(
+          disabled=true,
+          type="text", value=settings['core.brand_name'] || '',
+          title="The brand name of the application.")
+    .form-group
+      label(for="g-core-contact-email-address") Contact email address
+      input#g-core-contact-email-address.form-control.input-sm(
+          disabled=true,
+          type="text", value=settings['core.contact_email_address'] || '',
+          title="The contact email address for users to obtain support with this instance.")
+    .form-group
+      label(for="g-core-banner-color") Banner Color
+      #g-core-banner-color-container
+        input#g-core-banner-color.form-control.input-sm(
+            disabled=true,
+            type="color", value=settings['core.banner_color'],
+            title="The banner color of the application.")
+  .form-group
+    label(for="g-core-privacy-notice") Privacy Notice Link
+    input#g-core-privacy-notice.form-control.input-sm(
+        disabled=true,
+        type="text", value=settings['core.privacy_notice'] || '',
+        title="The privacy notice link.")
+  .form-group
+    label(for="g-core-cookie-lifetime") Cookie duration (days)
+    input#g-core-cookie-lifetime.form-control.input-sm(
+        disabled=true,
+        type="text", value=settings['core.cookie_lifetime'] || '',
+        title="How long users will stay logged in.")
+  .g-settings-form-container
+    h4 Administrative Policy
+    .form-group
+      label(for="g-core-registration-policy") Registration policy
+      select#g-core-registration-policy.form-control.input-sm(
+          disabled=true)
+        option(value="open",
+            selected=(settings['core.registration_policy'] === "open")) Open registration
+        option(value="closed",
+            selected=(settings['core.registration_policy'] === "closed")) Closed registration
+        option(value="approve",
+            selected=(settings['core.registration_policy'] === "approve")) Admin approval required
+    .form-group
+      label(for="g-core-email-verification") Email verification
+      select#g-core-email-verification.form-control.input-sm(
+          disabled=true)
+        option(value="required",
+            selected=(settings['core.email_verification'] === "required")) Required
+        option(value="optional",
+            selected=(settings['core.email_verification'] === "optional")) Optional
+        option(value="disabled",
+            selected=(settings['core.email_verification'] === "disabled")) Disabled
+    .form-group
+      label(for="g-core-add-to-group-policy") Allow members to be directly added to groups
+      select#g-core-add-to-group-policy.form-control.input-sm(
+          disabled=true)
+        option(value="never",
+            selected=(settings['core.add_to_group_policy'] === "never"))
+          | No, members must be invited and accept invitations
+        option(value="noadmin",
+            selected=(settings['core.add_to_group_policy'] === "noadmin"))
+          | No, except for group administrators when enabled per group
+        option(value="nomod",
+            selected=(settings['core.add_to_group_policy'] === "nomod"))
+          | No, except for group administrators and moderators when enabled per group
+        option(value="yesadmin",
+            selected=(settings['core.add_to_group_policy'] === "yesadmin"))
+          | Yes, by group administrators unless disabled per group
+        option(value="yesmod",
+            selected=(settings['core.add_to_group_policy'] === "yesmod"))
+          | Yes, by group administrators and moderators unless disabled per group
+    .g-collection-create-policy-container
+      label Collection creation policy
+      p.
+        Allow additional users and groups to create collections.
+      input.g-setting-switch(type="checkbox",
+          checked="checked", data-size="mini", data-on-color="primary")
+      .access-widget-container
+      textarea#g-core-collection-create-policy.hide
+        = JSON.stringify(settings['core.collection_create_policy'])
+    .form-group
+      label(for="g-core-user-default-folders") Create default folders for new users
+      select#g-core-user-default-folders.form-control.input-sm(
+          disabled=true)
+        option(value="none",
+            selected=(settings['core.user_default_folders'] === "none")) No
+        option(value="public_private",
+            selected=(settings['core.user_default_folders'] === "public_private")) Yes, "Public" and "Private"
+    .form-group
+      .checkbox
+        label(for="g-core-api-keys")
+          input#g-core-api-keys(type="checkbox", checked=settings['core.api_keys'],
+              disabled=true)
+          | Enable API keys
+    .form-group
+      .checkbox
+        label(for="g-core-enable-password-login")
+          input#g-core-enable-password-login(
+              type="checkbox", checked=settings['core.enable_password_login'],
+              disabled=true)
+          | Enable password login
+  .g-settings-form-container
+    h4 Email Creation
+    .form-group
+      label(for="g-core-email-from-address") Email from address
+      input#g-core-email-from-address.form-control.input-sm(
+          disabled=true,
+          type="text", value=settings['core.email_from_address'] || '',
+          title="The email address the system will use when sending emails.")
+    .form-group
+      label(for="g-core-email-host") Email host
+      input#g-core-email-host.form-control.input-sm(
+          disabled=true,
+          type="text", value=settings['core.email_host'] || '',
+          title="The host email server that is shown as a link in the footer of emails.")
+  .g-settings-form-container
+    h4 Email Delivery
+    .form-group
+      label(for="g-core-smtp-host") SMTP host
+      input#g-core-smtp-host.form-control.input-sm(
+          disabled=true,
+          type="text", value=settings['core.smtp_host'] || '',
+          title="The hostname of the SMTP server used to send emails.")
+    .form-group
+      label(for="g-core-smtp-port") SMTP port
+      input#g-core-smtp-port.form-control.input-sm(
+          disabled=true,
+          type="text", value=settings['core.smtp.port'] || '',
+          title="The port number of the SMTP server used to send emails.")
+    .form-group
+      label(for="g-core-smtp-encryption") SMTP encryption
+      select#g-core-smtp-encryption.form-control.input-sm(
+          disabled=true)
+        option(value="none",
+            selected=(settings['core.smtp.encryption'] === "none")) None
+        option(value="starttls",
+            selected=(settings['core.smtp.encryption'] === "starttls")) Use STARTTLS
+        option(value="ssl",
+            selected=(settings['core.smtp.encryption'] === "ssl")) Use SSL/TLS
+    .form-group
+      label(for="g-core-smtp-username") SMTP username
+      input#g-core-smtp-username.form-control.input-sm(
+          disabled=true,
+          type="text", value=settings['core.smtp.username'] || '',
+          title="The username, if any, used to authenticate to the SMTP server used to send emails.")
+    .form-group
+      label(for="g-core-smtp-password") SMTP password
+      input#g-core-smtp-password.form-control.input-sm(
+          disabled=true,
+          type="password", value=settings['core.smtp.password'] || '',
+          title="The password, if any, used to authenticate to the SMTP server used to send emails.")
+
+  #g-configuration-accordion.panel-group
+    .panel.panel-default
+      .panel-heading(data-toggle="collapse",
+          data-parent="#g-configuration-accordion",
+          data-target="#g-advanced-settings-tab")
+        .panel-title
+          a
+            b Advanced Settings
+      #g-advanced-settings-tab.panel-collapse.collapse
+        .panel-body
+          p These settings should only be changed if you are certain of what you are doing.
+          .form-group
+            label(for="g-core-server-root") Server root URL
+            input#g-core-server-root.form-control.input-sm(
+                disabled=true,
+                type="text", value=settings['core.server_root'] || '',
+                placeholder='Detect automatically')
+          .form-group
+            label(for="g-core-upload-minimum-chunk-size") Upload minimum chunk size (bytes)
+            br
+            span This applies to Filesystem assetstores.
+            input#g-core-upload-minimum-chunk-size.form-control.input-sm(
+                disabled=true,
+                type="text", value=settings['core.upload_minimum_chunk_size'] || '',
+                title="For large files, the minimum size of all but the last chunk.")
+          .g-settings-form-container
+            h4 CORS
+            p.
+              CORS (Cross-origin resource sharing) allows access from other websites.
+              These settings are described in
+              detail #[a(href="http://girder.readthedocs.org/en/latest/security.html#cors-cross-origin-resource-sharing", target="_blank") here].
+            .form-group
+              label(for="g-core-cors-allow-origin") CORS Allowed Origins
+              input#g-core-cors-allow-origin.form-control.input-sm(
+                  disabled=true,
+                  type="text", value=settings['core.cors.allow_origin'] || '',
+                  title="A comma-separated list of allowed base URLs that can make cross-site requests. This may include *.")
+            .form-group
+              label(for="g-core-cors-allow-methods") CORS Allowed Methods
+              input#g-core-cors-allow-methods.form-control.input-sm(
+                  disabled=true,
+                  type="text", value=settings['core.cors.allow_methods'] || '',
+                  placeholder="Default: allow all methods",
+                  title="A comma-separated list of allowed methods")
+            .form-group
+              label(for="g-core-cors-allow-headers") CORS Allowed Headers
+              input#g-core-cors-allow-headers.form-control.input-sm(
+                  disabled=true,
+                  type="text", value=settings['core.cors.allow_headers'] || '',
+                  title="A comma-separated list of allowed headers.")
+  p
+  .form-group
+    button.g-submit-settings.btn.btn-default.btn-sm #[i.icon-ok]  Save
+  #g-settings-error-message.g-validation-failed-message

package/dist-lib/src/templates/body/userAccount.pug

@@ -0,0 +1,83 @@
+.g-account-header
+  .g-user-name.g-body-title= user.name()
+  .g-user-description.g-body-subtitle= user.get('login')
+
+ul.g-account-tabs.nav.nav-tabs
+  li.active
+    a(href="#g-account-tab-info", data-toggle="tab", name="info")
+      i.icon-info-circled
+      |  Profile
+  li
+    a(href="#g-account-tab-password", data-toggle="tab", name="password")
+      i.icon-lock
+      | Password
+  li
+    a(href="#g-account-tab-api-keys", data-toggle="tab", name="apikeys")
+      i.icon-key-inv
+      | API keys
+  li
+    a(href="#g-account-tab-otp", data-toggle="tab", name="otp")
+      i.icon-mobile
+      | Two-factor authentication
+
+.tab-content
+  #g-account-tab-info.tab-pane.active
+    .g-user-info-container.g-user-settings-container
+      form#g-user-info-form(role="form")
+        .form-group
+          label(for="g-login") Login
+          p.form-control-static= user.get('login')
+        .form-group
+          label(for="g-email") Email
+          input#g-email.input-sm.form-control(type="text", value=user.get('email'))
+        .form-group
+          label(for="g-firstName") First name
+          input#g-firstName.input-sm.form-control(type="text", value=user.get('firstName'))
+        .form-group
+          label(for="g-lastName") Last name
+          input#g-lastName.input-sm.form-control(type="text", value=user.get('lastName'))
+        if getCurrentUser().get('admin')
+          .form-group
+            label(for="g-admin") User is site admin
+            input#g-admin.input-sm-form-control(type="checkbox", checked=user.get('admin'))
+        button.btn.btn-default.btn-sm(type="submit")
+          i.icon-edit
+          | Save
+        #g-user-info-error-msg.g-validation-failed-message
+
+  #g-account-tab-password.tab-pane
+    .g-password-change-container.g-user-settings-container
+      form#g-password-change-form(role="form")
+        if temporaryToken
+          input#g-password-old.input-sm.form-control(type="hidden", value=temporaryToken)
+        else if isCurrentUser
+          .form-group
+            label(for="g-password-old") Current password
+            input#g-password-old.input-sm.form-control(type="password", placeholder="Enter current password")
+        .form-group
+          label(for="g-password-new") New password
+          input#g-password-new.input-sm.form-control(type="password", placeholder="Enter new password")
+        .form-group
+          label(for="g-password-retype") Retype new password
+          input#g-password-retype.input-sm.form-control(type="password", placeholder="Retype new password")
+        button.btn.btn-default.btn-sm(type="submit")
+          i.icon-lock
+          | Change
+        #g-password-change-error-msg.g-validation-failed-message
+  #g-account-tab-api-keys.tab-pane
+    .g-api-keys-container.g-user-settings-container
+      .g-api-keys-info-text.
+        API keys can be used to grant limited or total access to client applications on your behalf.
+        Clients can use these keys to create tokens that can be used for authenticated access. You may
+        limit the tokens created with a given key to certain authorization scopes, or allow the tokens
+        complete access to everything your user can do. You may also choose the maximum time that
+        tokens created with a given key will last before expiration. If you do not specify a duration,
+        the default expiration for user login sessions will be used.
+
+      .g-api-keys-list-container
+  #g-account-tab-otp.tab-pane
+    .g-user-settings-container
+      .g-account-otp-info-text.
+        Two-factor authentication adds another level of authentication to your account log-in.
+
+      .g-account-otp-container

package/dist-lib/src/templates/body/userList.pug

@@ -0,0 +1,43 @@
+- const isAdmin = currentUser && currentUser.get('admin');
+- const userTooltip = usersCount === 1 ? `${usersCount} total user` : `${usersCount} total users`;
+.g-user-list-header
+  .g-user-pagination
+  if currentUser
+    .g-user-count-container(title=userTooltip)
+      i.icon-user
+      span.g-user-count= usersCount
+
+  .g-user-sort
+  form.g-user-search-form.form-inline(role="form")
+    .form-group.g-users-search-container
+  if isAdmin
+    button.g-user-create-button.btn.btn-sm.btn-default
+      i.icon-plus-squared
+      |  Create user
+
+each user in users
+  .g-user-list-entry
+    .g-user-right-column
+      .g-user-joined
+        i.icon-clock
+        | Joined on
+        span.g-user-joined-date  #{formatDate(user.get('created'), DATE_DAY)}
+      if user.get('size') !== undefined
+        .g-space-used
+          i.icon-floppy
+          | Currently using
+          span.g-user-space-used  #{formatSize(user.get('size'))}
+      if user.get('status') === 'disabled'
+        .g-user-status
+          i.icon-cancel-circled
+          | Account disabled
+      else if user.get('status') === 'pending'
+        .g-user-status
+          i.icon-attention-circled
+          | Account pending approval
+    .g-user-title
+      a.g-user-link(g-user-cid=user.cid)
+        b= user.name()
+    .g-user-subtitle
+      span.g-user-login  #{user.get('login')}
+    .g-clear-right

package/dist-lib/src/templates/body/userPage.pug

@@ -0,0 +1,40 @@
+.g-user-header
+
+  if user.getAccessLevel() >= AccessType.WRITE
+    .btn-group.pull-right
+      button.g-user-actions-button.btn.btn-default.dropdown-toggle(
+        data-toggle="dropdown", title="Item actions")
+        i.icon-user
+        |  Actions
+        i.icon-down-dir
+      ul.g-item-actions-menu.dropdown-menu.pull-right(role="menu")
+        li(role="presentation")
+          a.g-edit-user(role="menuitem")
+            i.icon-edit
+            | Edit user
+        if user.getAccessLevel() >= AccessType.ADMIN
+          li.divider(role="presentation")
+          if user.get('status') === 'pending'
+            li(role="presentation")
+              a.g-approve-user(role="menuitem")
+                i.icon-ok-squared
+                | Approve account
+          else if user.get('status') === 'enabled'
+            li(role="presentation")
+              a.g-disable-user(role="menuitem")
+                i.icon-cancel
+                | Disable account
+          else if user.get('status') === 'disabled'
+            li(role="presentation")
+              a.g-enable-user(role="menuitem")
+                i.icon-ok
+                | Enable account
+          li(role="presentation")
+            a.g-delete-user(role="menuitem")
+              i.icon-trash
+              | Delete user
+
+  .g-user-name.g-body-title #{user.get('firstName')} #{user.get('lastName')}
+  .g-user-login.g-body-subtitle #{user.get('login')}
+
+.g-user-hierarchy-container

package/dist-lib/src/templates/layout/alert.pug

@@ -0,0 +1,5 @@
+.alert.alert-dismissable(class=`alert-${type}`)
+  button.close(type="button", data-dismiss="alert", aria-hidden="true") ×
+  if icon
+    i(class=`icon-${icon}`)
+  |  #{text}

package/dist-lib/src/templates/layout/layout.pug

@@ -0,0 +1,12 @@
+#g-app-header-container
+#g-global-nav-container
+#g-app-body-container.g-default-layout
+#g-app-footer-container
+
+#g-app-progress-container
+
+//- Set tabindex on modal element to allow closing modal by pressing Escape. See:
+//- - http://getbootstrap.com/javascript/#modals-examples
+//- - http://stackoverflow.com/questions/12630156/
+#g-dialog-container.modal.fade(tabindex="-1")
+#g-alerts-container

package/dist-lib/src/templates/layout/layoutFooter.pug

@@ -0,0 +1,11 @@
+.g-footer-links
+  a#g-about-link(href="http://girder.readthedocs.org/en/latest/user-guide.html") About
+  if contactHref
+    a#g-contact-link(href=contactHref) Contact
+  a(href=apiRoot) Web API
+  a#g-bug-link(href="https://github.com/girder/girder/issues/new") Report a bug
+  if privacyNoticeLink
+    a#g-privacy-notice-link(href=privacyNoticeLink) Privacy Notice
+
+.g-footer-info
+  | © Kitware, Inc.

package/dist-lib/src/templates/layout/layoutGlobalNav.pug

@@ -0,0 +1,7 @@
+.g-global-nav-main
+  ul.g-global-nav
+    each navItem in navItems
+      li.g-global-nav-li
+        a.g-nav-link(g-target=navItem.target, g-name=navItem.name, href=`#${navItem.target}`)
+          i(class=navItem.icon)
+          span= navItem.name

package/dist-lib/src/templates/layout/layoutHeader.pug

@@ -0,0 +1,8 @@
+.g-header-wrapper(style=`background-color: ${bannerColor}; color: ${textColor}`)
+  .g-app-title #{brandName}
+
+  form.g-quick-search-form(role="form")
+    .form-group.g-quick-search-container
+
+  .g-current-user-wrapper
+  .g-clear-both

package/dist-lib/src/templates/layout/layoutHeaderUser.pug

@@ -0,0 +1,26 @@
+.g-user-text
+  if user
+    a.g-user-dropdown-link(data-toggle="dropdown", data-target="#g-user-action-menu")
+      | #[i.icon-user] #{user.get('login')}
+      i.icon-down-open
+    #g-user-action-menu.dropdown
+      ul.dropdown-menu(role="menu")
+        li(role="presentation")
+          a.g-my-folders(href=`#user/${user.id}`)
+            i.icon-folder
+            | My folders
+        li(role="presentation")
+          a.g-my-settings(href=`#useraccount/${user.id}/info`)
+            i.icon-cog
+            | My account
+        li.divider(role="presentation")
+        li(role="presentation")
+          a.g-logout
+            i.icon-logout
+            | Log out
+  else
+    if registrationPolicy !== 'closed'
+      a.g-register Register
+      .g-or-text or
+    a.g-login Log In
+      i.icon-login

package/dist-lib/src/templates/layout/layoutProgressArea.pug

@@ -0,0 +1 @@
+.g-progress-list-container

package/dist-lib/src/templates/layout/loginDialog.pug

@@ -0,0 +1,30 @@
+.modal-dialog
+  .modal-content
+    form#g-login-form.modal-form(role="form")
+      .modal-header
+        button.close(data-dismiss="modal", aria-hidden="true", type="button") ×
+        h4.modal-title Log in
+      .modal-body
+        if enablePasswordLogin
+          .form-group
+            label.control-label(for="g-login") Login or email
+            input#g-login.input-sm.form-control(type="text", placeholder="Enter login")
+          .form-group
+            label.control-label(for="g-password") Password
+            input#g-password.input-sm.form-control(type="password", placeholder="Enter password")
+          #g-login-otp-group.form-group.hidden
+            label.control-label(for="g-login-otp") Two-factor code
+            input#g-login-otp.input-sm.form-control(
+              type='text', minlength=6, maxlength=6, placeholder="Your 6-digit two-factor authentication code, if enabled")
+          .g-validation-failed-message
+          .g-bottom-message
+            if registrationPolicy !== 'closed'
+              | Don't have an account yet?
+              a.g-register-link  Register here.
+              |  |
+            a.g-forgot-password  Forgot your password?
+      .modal-footer
+        a.btn.btn-default(data-dismiss="modal") Close
+        button#g-login-button.btn.btn-primary(type="submit")
+          i.icon-login
+          |  Login

package/dist-lib/src/templates/layout/registerDialog.pug

@@ -0,0 +1,35 @@
+.modal-dialog
+  .modal-content
+    form#g-register-form.modal-form(role="form")
+      .modal-header
+        button.close(data-dismiss="modal", aria-hidden="true", type="button") ×
+        h4.modal-title= title
+      .modal-body
+        #g-group-login.form-group
+          label.control-label(for="g-login") Choose a login name
+          input#g-login.input-sm.form-control(type="text", placeholder="Login")
+        #g-group-email.form-group
+          label.control-label(for="g-email") Enter email address
+          input#g-email.input-sm.form-control(type="text", placeholder="Email")
+        #g-group-firstName.form-group
+          label.control-label(for="g-firstName") Enter first name
+          input#g-firstName.input-sm.form-control(type="text", placeholder="First name")
+        #g-group-lastName.form-group
+          label.control-label(for="g-lastName") Enter last name
+          input#g-lastName.input-sm.form-control(type="text", placeholder="Last name")
+        #g-group-password.form-group
+          label.control-label(for="g-password") Choose a password
+          input#g-password.input-sm.form-control(type="password", placeholder="Password")
+        #g-group-password2.form-group
+          label.control-label(for="g-password2") Retype password
+          input#g-password2.input-sm.form-control(type="password", placeholder="Password")
+        .g-validation-failed-message
+        if !currentUser
+          .g-bottom-message
+            | Already have an account?
+            a.g-login-link  Log in here.
+      .modal-footer
+        a.btn.btn-default(data-dismiss="modal") Close
+        button#g-register-button.btn.btn-primary(type="submit")
+          i.icon-plus-circled
+          |  Register

package/dist-lib/src/templates/layout/resetPasswordDialog.pug

@@ -0,0 +1,25 @@
+.modal-dialog
+  .modal-content
+    form#g-reset-password-form.modal-form(role="form")
+      .modal-header
+        button.close(data-dismiss="modal", aria-hidden="true", type="button") ×
+        h4.modal-title Forgotten password
+      .modal-body
+        .g-password-reset-explanation
+          | If you have forgotten your password, enter your email address here.
+          | You will be sent an email with a temporary access link, from
+          | which you can reset your password.
+        .form-group
+          label.control-label(for="g-email") Email
+          input#g-email.input-sm.form-control(type="text", placeholder="Enter your email")
+        .g-validation-failed-message
+        .g-bottom-message
+          if registrationPolicy !== 'closed'
+            a.g-register-link  Register
+            |  |
+          a.g-login-link  Login
+      .modal-footer
+        a.btn.btn-default(data-dismiss="modal") Close
+        button#g-reset-password-button.btn.btn-primary(type="submit")
+          i.icon-mail
+          |  Submit

package/dist-lib/src/templates/widgets/accessEditor.pug

@@ -0,0 +1,23 @@
+include accessEditorMixins
+
+.modal-dialog
+  .modal-content
+    .modal-header
+      button.close(data-dismiss="modal", aria-hidden="true", type="button") ×
+      h4.modal-title Access control
+      .g-dialog-subtitle
+        if (modelType === 'folder')
+          i.icon-folder
+        else if (modelType === 'collection')
+          i.icon-sitemap
+        = model.name()
+    .modal-body.g-access-modal-body
+      if !hidePrivacyEditor
+        +privacyEditor(modelType)
+      +permissionsEditor
+      if !hideRecurseOption
+        +recurseOption(modelType)
+
+    .modal-footer
+      a.btn.btn-small.btn-default(data-dismiss="modal") Close
+      +saveAccessButton

package/dist-lib/src/templates/widgets/accessEditorMixins.pug

@@ -0,0 +1,57 @@
+mixin privacyEditor(typeName)
+  .g-public-container
+    .radio
+      label
+        input#g-access-private(type="radio", name="privacy",
+            checked=(publicFlag ? undefined : "checked"))
+        i.icon-lock
+        | #[b Private] — Access is required to view this #{typeName}
+    .radio
+      label
+        input#g-access-public(type="radio", name="privacy",
+            checked=(publicFlag ? "checked" : undefined))
+        i.icon-globe
+        | #[b Public] — Anyone can view this #{typeName}
+
+    if _.keys(flagList).length
+      a.g-action-manage-public-flags.hide(title="Public access flags")
+        i.g-flag-icon.icon-flag
+          - var flagLen = (publicFlags && publicFlags.length) || 0
+          .g-flag-count-indicator(class=(flagLen ? null : "hide"))= flagLen
+        |  Manage public access flags...
+      .g-public-flags-popover-container.hide
+        each flag, key in flagList
+          - var checked = _.contains(publicFlags, key) ? 'checked' : null;
+          - var disabled = (!isAdmin && flag.admin) ? 'disabled' : null;
+          .checkbox(class=disabled)
+            label.g-flag-label(title=flag.description)
+              input.g-public-flag-checkbox(flag=key, type="checkbox", checked=checked, disabled=disabled)
+              span= flag.name
+        button.g-close-public-flags-popover.btn.btn-xs.btn-default Close
+
+mixin permissionsEditor
+  .g-permissions-editor
+    .g-ac-list-title #[i.icon-key-1]  Permissions
+    .g-ac-list
+      #g-ac-list-groups
+      #g-ac-list-users
+
+    .g-grant-access-container
+      form(role="form")
+        .form-group
+          label(for="addAccess") Grant access to another group or user
+          .g-search-field-container
+
+mixin recurseOption(typeName)
+  .g-recursive-container
+    .radio
+      label
+        input#g-apply-nonrecursive(type="radio", name="recurse", checked="checked")
+        | Apply permissions only to this #{typeName}, not its subfolders
+    .radio
+      label
+        input#g-apply-recursive(type="radio", name="recurse")
+        | Also set permissions on all subfolders to match this #{typeName}'s permissions
+
+mixin saveAccessButton
+  button.g-save-access-list.btn.btn-small.btn-primary #[i.icon-ok]  Save

package/dist-lib/src/templates/widgets/accessEditorNonModal.pug

@@ -0,0 +1,11 @@
+include accessEditorMixins
+
+if !hidePrivacyEditor
+  +privacyEditor(modelType)
++permissionsEditor
+
+if !hideRecurseOption
+  +recurseOption(modelType)
+
+if !hideSaveButton
+  +saveAccessButton