Alec Perkins
1af217f6fb
Sign-in via django-allauth: emailed one-time codes, GitHub, Discord, and Forgejo instances as OpenID Connect apps registered in admin. Regular users never have a password; sysadmins sign in only at /admin/ and are redirected there from the normal sign-in. Organizations at the URL root with owner and collaborator roles, a per-member project-create grant, and invites by username or email. Email invites carry a bearer token stored only as a hash. The last owner can't leave, be removed or be demoted. Permission checks live in intent/access.py. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
23 lines
752 B
HTML
23 lines
752 B
HTML
{% extends "base.html" %}
|
|
|
|
{% block title %}{{ org.name }} · Intent{% endblock %}
|
|
|
|
{% block content %}
|
|
<h1>{{ org.name }}</h1>
|
|
|
|
{% if access.is_member %}
|
|
<p>You're {% if access.is_owner %}an owner{% else %}a collaborator{% endif %} of this organization.</p>
|
|
<ul>
|
|
<li><a href="{% url 'orgs:members' org_slug=org.slug %}">Members</a></li>
|
|
</ul>
|
|
|
|
<details>
|
|
<summary>Leave {{ org.name }}</summary>
|
|
<form method="post" action="{% url 'orgs:member_remove' org_slug=org.slug membership_id=access.membership.pk %}">
|
|
{% csrf_token %}
|
|
<p>You'll need a new invitation to rejoin.</p>
|
|
<p><button type="submit">Leave {{ org.name }}</button></p>
|
|
</form>
|
|
</details>
|
|
{% endif %}
|
|
{% endblock %}
|