girder 3.2.17.dev6__tar.gz → 3.2.17.dev14__tar.gz

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: girder
-Version: 3.2.17.dev6
+Version: 3.2.17.dev14
 Summary: Web-based data management platform
 Home-page: https://girder.readthedocs.org
 Author: Kitware, Inc.

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/models/model_base.py

@@ -43,12 +43,18 @@ def _permissionClauses(user=None, level=None, prefix=''):
     :returns: A query dictionary with an '$or' entry which consists of a list
         of match clauses, any one of which implies validation.
     """
+    from girder.models.setting import Setting
+    from girder.settings import SettingKey
+
     permissionClauses = []
     if level is None or (user and user['admin']):
         # Without a level or with an admin user, match everything.
         return {}
     if level <= AccessType.READ:
-        permissionClauses.append({prefix + 'public': True})
+        if user or not Setting().get(SettingKey.DISABLE_ANONYMOUS_ACCESS):
+            permissionClauses.append({prefix + 'public': True})
+        else:
+            return {'__matchnothing': 'nothing'}
     elif not user:
         # If we have no user and asked for higher than read access, make a
         # query that will fail
@@ -1205,9 +1211,12 @@ class AccessControlledModel(Model):
         """
         if user is None:
             if doc.get('public', False):
-                return AccessType.READ
-            else:
-                return AccessType.NONE
+                from girder.models.setting import Setting
+                from girder.settings import SettingKey
+
+                if not Setting().get(SettingKey.DISABLE_ANONYMOUS_ACCESS):
+                    return AccessType.READ
+            return AccessType.NONE
         elif user['admin']:
             return AccessType.ADMIN
         else:
@@ -1357,8 +1366,14 @@ class AccessControlledModel(Model):
         :returns: Whether the access is granted.
         """
         if level <= AccessType.READ and doc.get('public', False) is True:
-            # Short-circuit the case of public resources
-            return True
+            from girder.models.setting import Setting
+            from girder.settings import SettingKey
+
+            if user is not None or not Setting().get(SettingKey.DISABLE_ANONYMOUS_ACCESS):
+                # Short-circuit the case of public resources
+                return True
+            elif user is None:
+                return False
         elif user is None:
             # Anonymous users can only see public resources
             return False

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/settings.py

@@ -26,11 +26,13 @@ class SettingKey:
     CORS_ALLOW_METHODS = 'core.cors.allow_methods'
     CORS_ALLOW_ORIGIN = 'core.cors.allow_origin'
     CORS_EXPOSE_HEADERS = 'core.cors.expose_headers'
+    SHOW_DOWNLOAD = 'core.show_download'
     EMAIL_FROM_ADDRESS = 'core.email_from_address'
     EMAIL_HOST = 'core.email_host'
     EMAIL_VERIFICATION = 'core.email_verification'
     ENABLE_NOTIFICATION_STREAM = 'core.enable_notification_stream'
     ENABLE_PASSWORD_LOGIN = 'core.enable_password_login'
+    DISABLE_ANONYMOUS_ACCESS = 'core.disable_anonymous_access'
     FILEHANDLE_MAX_SIZE = 'core.filehandle_max_size'
     GIRDER_MOUNT_INFORMATION = 'core.girder_mount_information'
     HTTP_ONLY_COOKIES = 'core.http_only_cookies'
@@ -73,6 +75,7 @@ class SettingDefault:
         SettingKey.CORS_ALLOW_METHODS: 'GET, POST, PUT, HEAD, DELETE',
         SettingKey.CORS_ALLOW_ORIGIN: '',
         SettingKey.CORS_EXPOSE_HEADERS: 'Girder-Total-Count, Content-Disposition',
+        SettingKey.SHOW_DOWNLOAD: 'all',
         # An apache server using reverse proxy would also need
         #  X-Requested-With, X-Forwarded-Server, X-Forwarded-For,
         #  X-Forwarded-Host, Remote-Addr
@@ -81,6 +84,7 @@ class SettingDefault:
         SettingKey.EMAIL_VERIFICATION: 'disabled',
         SettingKey.ENABLE_NOTIFICATION_STREAM: True,
         SettingKey.ENABLE_PASSWORD_LOGIN: True,
+        SettingKey.DISABLE_ANONYMOUS_ACCESS: False,
         SettingKey.FILEHANDLE_MAX_SIZE: 1024 * 1024 * 16,
         SettingKey.GIRDER_MOUNT_INFORMATION: None,
         SettingKey.HTTP_ONLY_COOKIES: False,  # TODO This will go away in next major version
@@ -229,6 +233,17 @@ class SettingValidator:
         if not isinstance(doc['value'], str):
             raise ValidationException('CORS exposed headers must be a string', 'value')
 
+    @staticmethod
+    @setting_utilities.validator(SettingKey.SHOW_DOWNLOAD)
+    def _validateshowDownload(doc):
+        if not isinstance(doc['value'], str):
+            raise ValidationException(
+                'Show download must be "all", "user", "admin", or "none".', 'value')
+        doc['value'] = doc['value'].lower()
+        if doc['value'] not in ('all', 'user', 'admin', 'none'):
+            raise ValidationException(
+                'Show download must be "all", "user", "admin", or "none".', 'value')
+
     @staticmethod
     @setting_utilities.validator(SettingKey.EMAIL_FROM_ADDRESS)
     def _validateEmailFromAddress(doc):
@@ -265,6 +280,12 @@ class SettingValidator:
         if not isinstance(doc['value'], bool):
             raise ValidationException('Enable password login setting must be boolean.', 'value')
 
+    @staticmethod
+    @setting_utilities.validator(SettingKey.DISABLE_ANONYMOUS_ACCESS)
+    def _validateDisableAnonymousAccess(doc):
+        if not isinstance(doc['value'], bool):
+            raise ValidationException('Disable anonymous access setting must be boolean.', 'value')
+
     @staticmethod
     @setting_utilities.validator(SettingKey.FILEHANDLE_MAX_SIZE)
     def _validateFilehandleMaxSize(doc):

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/utility/webroot.mako

@@ -24,7 +24,8 @@
                 brandName: '${brandName | js}',
                 bannerColor: '${bannerColor | js}',
                 registrationPolicy: '${registrationPolicy | js}',
-                enablePasswordLogin: ${enablePasswordLogin | n,json,js}
+                enablePasswordLogin: ${enablePasswordLogin | n,json,js},
+                showDownload: '${showDownload | js}'
             }).render();
             girder.events.trigger('g:appload.after', girder.app);
         });

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/utility/webroot.py

@@ -122,5 +122,6 @@ class Webroot(WebrootBase):
         self.vars['bannerColor'] = Setting().get(SettingKey.BANNER_COLOR)
         self.vars['registrationPolicy'] = Setting().get(SettingKey.REGISTRATION_POLICY)
         self.vars['enablePasswordLogin'] = Setting().get(SettingKey.ENABLE_PASSWORD_LOGIN)
+        self.vars['showDownload'] = Setting().get(SettingKey.SHOW_DOWNLOAD)
 
         return super()._renderHTML()

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/templates/body/collectionPage.pug

@@ -7,12 +7,14 @@
       |  Actions
       i.icon-down-dir
     ul.g-collection-actions-menu.dropdown-menu.pull-right(role="menu")
-      li(role="presentation")
-        a.g-download-collection(role="menuitem", href=collection.downloadUrl())
-          i.icon-download
-          | Download collection
-      if (collection.getAccessLevel() >= AccessType.WRITE)
+      if (showDownload)
+        li(role="presentation")
+          a.g-download-collection(role="menuitem", href=collection.downloadUrl())
+            i.icon-download
+            | Download collection
+      if (showDownload && collection.getAccessLevel() >= AccessType.WRITE)
         li.divider(role="presentation")
+      if (collection.getAccessLevel() >= AccessType.WRITE)
         li(role="presentation")
           a.g-edit-collection(role="menuitem")
             i.icon-edit

girder-3.2.17.dev14/girder/web_client/src/templates/body/itemPage.pug

@@ -0,0 +1,64 @@
+.g-item-breadcrumb-container
+.g-item-header
+
+  .pull-right
+    if (accessLevel >= AccessType.WRITE)
+      button.g-upload-into-item.btn.btn-sm.btn-success(title="Upload files into item")
+        i.icon-upload
+    if showDownload || accessLevel >= AccessType.WRITE
+      .btn-group
+        button.g-item-actions-button.btn.btn-sm.btn-default.dropdown-toggle(
+            data-toggle="dropdown", title="Item actions")
+          i.icon-doc-text-inv
+          |  Actions
+          i.icon-down-dir
+        ul.g-item-actions-menu.dropdown-menu.pull-right(role="menu")
+          if (showDownload)
+            li(role="presentation")
+              a.g-download-item(role="menuitem", href=item.downloadUrl())
+                i.icon-download
+                | Download item
+          if (showDownload && accessLevel >= AccessType.WRITE)
+            li.divider(role="presentation")
+          if (accessLevel >= AccessType.WRITE)
+            li(role="presentation")
+              a.g-edit-item(role="menuitem")
+                i.icon-edit
+                | Edit item
+            li.divider(role="presentation")
+            li(role="presentation")
+              a.g-delete-item(role="menuitem")
+                i.icon-trash
+                | Delete item
+
+  .g-item-name.g-body-title= item.name()
+
+.g-item-description!= renderMarkdown(item.get('description'))
+
+.g-item-info
+  .g-item-info-header
+    i.icon-info
+    | Info
+  .g-item-size.g-info-list-entry
+    i.icon-hdd
+    if item.get('size') < 1024
+      | #{item.get('size')} bytes
+    else
+      | #{formatSize(item.get('size'))} (#{item.get('size')} bytes)
+  .g-item-created.g-info-list-entry
+    i.icon-clock
+    | Created on #{formatDate(item.get('created'), DATE_SECOND)}
+  .g-item-updated.g-info-list-entry
+    i.icon-clock
+    | Updated on #{formatDate(item.get('updated'), DATE_SECOND)}
+  .g-item-id.g-info-list-entry
+    i.icon-share
+    | Unique ID: #{item.id}
+
+.g-item-metadata
+
+.g-item-files
+  .g-item-files-header
+    i.icon-docs
+    |  Files &amp; links
+  .g-item-files-container

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/templates/body/systemConfiguration.pug

@@ -95,6 +95,12 @@ form.g-settings-form(role="form")
           input#g-core-enable-password-login(
               type="checkbox", checked=settings['core.enable_password_login'])
           | Enable password login
+    .form-group
+      .checkbox
+        label(for="g-core-disable-anonymous-access")
+          input#g-core-disable-anonymous-access(
+              type="checkbox", checked=settings['core.disable_anonymous_access'])
+          | Disable anonymous access
   .g-settings-form-container
     h4 Email Creation
     .form-group

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/templates/widgets/checkedActionsMenu.pug

@@ -9,10 +9,11 @@ li.g-checked-menu-header.dropdown-header(role="presentation")
     i.icon-plus-circled
     span.g-checked-picked-count #{pickedCount}
 if folderCount || itemCount
-  li
-    a.g-download-checked
-      i.icon-download
-      | Download checked resources
+  if showDownload
+    li
+      a.g-download-checked
+        i.icon-download
+        | Download checked resources
   li
     a.g-pick-checked
       i.icon-plus-circled

girder-3.2.17.dev14/girder/web_client/src/templates/widgets/fileList.pug

@@ -0,0 +1,44 @@
+ul.g-file-list
+  each file in files
+    li.g-file-list-entry
+      if (showDownload)
+        a.g-file-list-link(cid=file.cid, title="Download file",
+            target=file.get('linkUrl') ? '_blank' : '_self', href=file.downloadUrl(),
+            rel="noopener noreferrer")
+          if file.get('linkUrl')
+            i.icon-link
+            span.g-file-name= file.name()
+            i.icon-link-ext
+          else
+            i.icon-doc-inv
+            = file.name()
+      else
+        span.g-file-list-link(cid=file.cid)
+          if file.get('linkUrl')
+            i.icon-link
+            span.g-file-name= file.name()
+            i.icon-link-ext
+          else
+            i.icon-doc-inv
+            = file.name()
+      if (showDownload || !file.has('size') || file.get('size') < 100000)
+        a.g-view-inline(title="View in browser", target="_blank", rel="noopener noreferrer",
+            href=file.downloadUrl({contentDisposition: 'inline'}))
+          i.icon-eye
+      a.g-show-info(file-cid=file.cid, title="Show info")
+        i.icon-info
+      if file.has('size')
+        .g-file-size= formatSize(file.get('size'))
+      .g-file-actions-container(file-cid=file.cid)
+        if parentItem && parentItem.get('_accessLevel') >= AccessType.WRITE
+          a.g-update-info(title="Edit file info")
+            i.icon-edit
+          a.g-update-contents(title="Replace file contents")
+            i.icon-upload
+          a.g-delete-file(title="Delete file")
+            i.icon-cancel
+  if hasMore
+    li.g-show-more
+      a.g-show-more-files
+        i.icon-level-down
+        | Show more files...

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/templates/widgets/hierarchyWidget.pug

@@ -49,10 +49,11 @@
                 i.icon-folder-open
               |  #{model.name()}
             if type === 'folder' || type === 'collection'
-              li(role="presentation")
-                a.g-download-folder(role="menuitem", href=model.downloadUrl())
-                  i.icon-download
-                  | Download #{type}
+              if (showDownload)
+                li(role="presentation")
+                  a.g-download-folder(role="menuitem", href=model.downloadUrl())
+                    i.icon-download
+                    | Download #{type}
             if level >= AccessType.WRITE
               li(role="presentation")
                 a.g-create-subfolder(role="menuitem")

girder-3.2.17.dev14/girder/web_client/src/utilities/ShowDownload.js

@@ -0,0 +1,15 @@
+/**
+ * Given a view, returns whether or not the download widget(s)
+ * should be displayed to the user.
+ *
+ * @param {Backbone.View} view
+ * @returns the value of the SHOW_DOWNLOAD setting in the current
+ * view hierarchy. Defaults to `true`.
+ */
+export function showDownload(view) {
+    let baseView = view;
+    while (baseView.parentView) {
+        baseView = baseView.parentView;
+    }
+    return baseView && baseView.showDownload ? baseView.showDownload() : true;
+}

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/utilities/index.js

@@ -1,9 +1,11 @@
 import eventStream from './EventStream';
 import * as PluginUtils from './PluginUtils';
 import * as S3UploadHandler from './S3UploadHandler';
+import { showDownload } from './ShowDownload';
 
 export {
     eventStream,
     PluginUtils,
-    S3UploadHandler
+    S3UploadHandler,
+    showDownload
 };

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/views/App.js

@@ -47,6 +47,7 @@ var App = View.extend({
         this.bannerColor = settings.bannerColor || null;
         this.registrationPolicy = settings.registrationPolicy || null;
         this.enablePasswordLogin = _.has(settings, 'enablePasswordLogin') ? settings.enablePasswordLogin : true;
+        this.downloadShown = settings.showDownload || 'all';
 
         if (settings.start === undefined || settings.start) {
             this.start();
@@ -338,6 +339,16 @@ var App = View.extend({
         }
     },
 
+    showDownload: function () {
+        const user = getCurrentUser();
+        const isAdmin = !!(user && user.get('admin'));
+        return this.downloadShown === undefined ||
+            this.downloadShown === null ||
+            this.downloadShown === 'all' ||
+            (this.downloadShown === 'user' && user) ||
+            (this.downloadShown === 'admin' && isAdmin);
+    },
+
     /**
      * On login we re-render the current body view; whereas on
      * logout, we redirect to the front page.

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/views/body/CollectionView.js

@@ -21,6 +21,8 @@ import '@girder/core/stylesheets/body/collectionPage.styl';
 
 import 'bootstrap/js/dropdown';
 
+import { showDownload } from '../../utilities';
+
 /**
  * This view shows a single collection's page.
  */
@@ -88,7 +90,8 @@ var CollectionView = View.extend({
         this.$el.html(CollectionPageTemplate({
             collection: this.model,
             AccessType: AccessType,
-            renderMarkdown: renderMarkdown
+            renderMarkdown: renderMarkdown,
+            showDownload: showDownload(this)
         }));
 
         if (!this.hierarchyWidget) {

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/views/body/ItemView.js

@@ -21,6 +21,8 @@ import '@girder/core/stylesheets/body/itemPage.styl';
 
 import 'bootstrap/js/dropdown';
 
+import { showDownload } from '../../utilities';
+
 /**
  * This view shows a single item's page.
  */
@@ -119,6 +121,7 @@ var ItemView = View.extend({
                 formatSize: formatSize,
                 formatDate: formatDate,
                 renderMarkdown: renderMarkdown,
+                showDownload: showDownload(this),
                 DATE_SECOND: DATE_SECOND
             }));
 

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/views/body/SystemConfigurationView.js

@@ -41,7 +41,8 @@ var SystemConfigurationView = View.extend({
                     [
                         'core.api_keys',
                         'core.enable_password_login',
-                        'core.enable_notification_stream'
+                        'core.enable_notification_stream',
+                        'core.disable_anonymous_access'
                     ],
                     key
                 )) { // booleans via checkboxes
@@ -92,6 +93,7 @@ var SystemConfigurationView = View.extend({
             'core.banner_color',
             'core.privacy_notice',
             'core.cookie_lifetime',
+            'core.disable_anonymous_access',
             'core.enable_password_login',
             'core.email_from_address',
             'core.email_host',

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/views/widgets/CheckedMenuWidget.js

@@ -6,6 +6,8 @@ import CheckedActionsMenuTemplate from '@girder/core/templates/widgets/checkedAc
 
 import '@girder/core/utilities/jquery/girderEnable';
 
+import { showDownload } from '../../utilities';
+
 /**
  * This widget presents a list of available batch actions
  * on a set of selected resources.
@@ -35,6 +37,7 @@ var CheckedMenuWidget = View.extend({
             pickedCopyAllowed: this.pickedCopyAllowed,
             pickedMoveAllowed: this.pickedMoveAllowed,
             pickedDesc: this.pickedDesc,
+            showDownload: showDownload(this),
             HierarchyWidget: HierarchyWidget
         }));
 

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/views/widgets/FileListWidget.js

@@ -12,6 +12,8 @@ import events from '@girder/core/events';
 
 import FileListTemplate from '@girder/core/templates/widgets/fileList.pug';
 
+import { showDownload } from '../../utilities';
+
 /**
  * This widget shows a list of files in a given item.
  */
@@ -124,6 +126,7 @@ var FileListWidget = View.extend({
             hasMore: this.collection.hasNextPage(),
             AccessType: AccessType,
             formatSize: formatSize,
+            showDownload: showDownload(this),
             parentItem: this.parentItem
         }));
 

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/views/widgets/HierarchyWidget.js

@@ -30,6 +30,8 @@ import '@girder/core/stylesheets/widgets/hierarchyWidget.styl';
 
 import 'bootstrap/js/dropdown';
 
+import { showDownload } from '../../utilities';
+
 var pickedResources = null;
 
 /**
@@ -355,6 +357,7 @@ var HierarchyWidget = View.extend({
             showMetadata: this._showMetadata,
             checkboxes: this._checkboxes,
             capitalize: capitalize,
+            showDownload: showDownload(this),
             itemFilter: this._itemFilter
         }));
 

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder/web_client/src/views/widgets/ItemListWidget.js

@@ -9,6 +9,8 @@ import { restRequest } from '@girder/core/rest';
 
 import ItemListTemplate from '@girder/core/templates/widgets/itemList.pug';
 
+import { showDownload } from '../../utilities';
+
 /**
  * This widget shows a list of items under a given folder.
  */
@@ -44,6 +46,9 @@ var ItemListWidget = View.extend({
         this._checkboxes = settings.checkboxes;
         this._downloadLinks = (
             _.has(settings, 'downloadLinks') ? settings.downloadLinks : true);
+        if (!showDownload(this)) {
+            this._downloadLinks = false;
+        }
         this._viewLinks = (
             _.has(settings, 'viewLinks') ? settings.viewLinks : true);
         this._showSizes = (

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: girder
-Version: 3.2.17.dev6
+Version: 3.2.17.dev14
 Summary: Web-based data management platform
 Home-page: https://girder.readthedocs.org
 Author: Kitware, Inc.

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder.egg-info/SOURCES.txt

@@ -371,6 +371,7 @@ girder/web_client/src/templates/widgets/userOtpEnable.pug
 girder/web_client/src/utilities/EventStream.js
 girder/web_client/src/utilities/PluginUtils.js
 girder/web_client/src/utilities/S3UploadHandler.js
+girder/web_client/src/utilities/ShowDownload.js
 girder/web_client/src/utilities/index.js
 girder/web_client/src/utilities/jquery/girderEnable.js
 girder/web_client/src/utilities/jquery/girderModal.js

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/girder.egg-info/scm_file_list.json

@@ -357,6 +357,7 @@
     "girder/web_client/src/utilities/EventStream.js",
     "girder/web_client/src/utilities/PluginUtils.js",
     "girder/web_client/src/utilities/S3UploadHandler.js",
+    "girder/web_client/src/utilities/ShowDownload.js",
     "girder/web_client/src/utilities/index.js",
     "girder/web_client/src/utilities/jquery/girderEnable.js",
     "girder/web_client/src/utilities/jquery/girderModal.js",
@@ -846,6 +847,7 @@
     "test/test_cache.py",
     "test/test_collection.py",
     "test/test_custom_root.py",
+    "test/test_disable_anonymous_access.py",
     "test/test_events.py",
     "test/test_file.py",
     "test/test_folder.py",
@@ -862,6 +864,7 @@
     "test/test_rest_utils.py",
     "test/test_route_table.py",
     "test/test_settings.py",
+    "test/test_show_download.py",
     "test/test_size.py",
     "test/test_system_rest.py",
     "test/test_token.py",

girder-3.2.17.dev14/girder.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "3.2.16",
+  "distance": 14,
+  "node": "g58a2175919ede060c1dfc8457e6b3f522c70247b",
+  "dirty": false,
+  "branch": "3.x-maintenance",
+  "node_date": "2026-09-08"
+}

{girder-3.2.17.dev6 → girder-3.2.17.dev14}/scripts/publicNames.txt

@@ -743,6 +743,7 @@ girder
             CORS_ALLOW_METHODS
             CORS_ALLOW_ORIGIN
             CORS_EXPOSE_HEADERS
+            DISABLE_ANONYMOUS_ACCESS
             EMAIL_FROM_ADDRESS
             EMAIL_HOST
             EMAIL_VERIFICATION
@@ -755,6 +756,7 @@ girder
             REGISTRATION_POLICY
             ROUTE_TABLE
             SERVER_ROOT
+            SHOW_DOWNLOAD
             SMTP_ENCRYPTION
             SMTP_HOST
             SMTP_PASSWORD

girder-3.2.17.dev6/girder/web_client/src/templates/body/itemPage.pug

@@ -1,61 +0,0 @@
-.g-item-breadcrumb-container
-.g-item-header
-
-  .pull-right
-    if (accessLevel >= AccessType.WRITE)
-      button.g-upload-into-item.btn.btn-sm.btn-success(title="Upload files into item")
-        i.icon-upload
-    .btn-group
-      button.g-item-actions-button.btn.btn-sm.btn-default.dropdown-toggle(
-          data-toggle="dropdown", title="Item actions")
-        i.icon-doc-text-inv
-        |  Actions
-        i.icon-down-dir
-      ul.g-item-actions-menu.dropdown-menu.pull-right(role="menu")
-        li(role="presentation")
-          a.g-download-item(role="menuitem", href=item.downloadUrl())
-            i.icon-download
-            | Download item
-        if (accessLevel >= AccessType.WRITE)
-          li.divider(role="presentation")
-          li(role="presentation")
-            a.g-edit-item(role="menuitem")
-              i.icon-edit
-              | Edit item
-          li.divider(role="presentation")
-          li(role="presentation")
-            a.g-delete-item(role="menuitem")
-              i.icon-trash
-              | Delete item
-
-  .g-item-name.g-body-title= item.name()
-
-.g-item-description!= renderMarkdown(item.get('description'))
-
-.g-item-info
-  .g-item-info-header
-    i.icon-info
-    | Info
-  .g-item-size.g-info-list-entry
-    i.icon-hdd
-    if item.get('size') < 1024
-      | #{item.get('size')} bytes
-    else
-      | #{formatSize(item.get('size'))} (#{item.get('size')} bytes)
-  .g-item-created.g-info-list-entry
-    i.icon-clock
-    | Created on #{formatDate(item.get('created'), DATE_SECOND)}
-  .g-item-updated.g-info-list-entry
-    i.icon-clock
-    | Updated on #{formatDate(item.get('updated'), DATE_SECOND)}
-  .g-item-id.g-info-list-entry
-    i.icon-share
-    | Unique ID: #{item.id}
-
-.g-item-metadata
-
-.g-item-files
-  .g-item-files-header
-    i.icon-docs
-    |  Files &amp; links
-  .g-item-files-container