%# BEGIN BPS TAGGED BLOCK {{{
%#
%# COPYRIGHT:
%#
%# This software is Copyright (c) 1996-2026 Best Practical Solutions, LLC
%#                                          <sales@bestpractical.com>
%#
%# (Except where explicitly superseded by other copyright notices)
%#
%#
%# LICENSE:
%#
%# This work is made available to you under the terms of Version 2 of
%# the GNU General Public License. A copy of that license should have
%# been provided with this software, but in any event can be snarfed
%# from www.gnu.org.
%#
%# This work is distributed in the hope that it will be useful, but
%# WITHOUT ANY WARRANTY; without even the implied warranty of
%# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
%# General Public License for more details.
%#
%# You should have received a copy of the GNU General Public License
%# along with this program; if not, write to the Free Software
%# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
%# 02110-1301 or visit their web page on the internet at
%# http://www.gnu.org/licenses/old-licenses/gpl-2.0.html.
%#
%#
%# CONTRIBUTION SUBMISSION POLICY:
%#
%# (The following paragraph is not intended to limit the rights granted
%# to you to modify and distribute this software under the terms of
%# the GNU General Public License and is only of importance to you if
%# you choose to contribute your changes and enhancements to the
%# community by submitting them to Best Practical Solutions, LLC.)
%#
%# By intentionally submitting any modifications, corrections or
%# derivatives to this work, or any other work intended for use with
%# Request Tracker, to Best Practical Solutions, LLC, you confirm that
%# you are the copyright holder for those contributions and you grant
%# Best Practical Solutions,  LLC a nonexclusive, worldwide, irrevocable,
%# royalty-free, perpetual, license to use, copy, create derivative
%# works based on those contributions, and sublicense and distribute
%# those contributions and any derivatives thereof.
%#
%# END BPS TAGGED BLOCK }}}
<&| /Elements/LabeledValue, Label => loc('Password status'), ValueSpanClass => 'current-value' &>
  <% $password_status %>
</&>
% if ( $is_admin_view || $is_admin_create ) {
  <div class="row mt-2">
    <div class="col-12">
      <div class="custom-control custom-checkbox">
        <input value="1" class="custom-control-input" id="SendPasswordResetEmail" name="SendPasswordResetEmail" type="checkbox" />
        <label class="custom-control-label" for="SendPasswordResetEmail"><&|/l&>Send new password email</&></label>
      </div>
    </div>
  </div>
% }
% if ( $is_admin_view && $User->HasPassword ) {
  <div class="row mt-2">
    <div class="col-12">
      <div class="custom-control custom-checkbox">
        <input value="1" class="custom-control-input" id="DeleteUserPassword" name="DeleteUserPassword" type="checkbox" />
        <label class="custom-control-label" for="DeleteUserPassword"><&|/l&>Delete password (User will have no password set)</&></label>
      </div>
    </div>
  </div>
% }
% unless ( $cond{'CanSet'} ) {
<% $cond{'Reason'} %><br />
% } else {
% for my $hint (@policy_hints) {
<&| /Elements/LabeledValue, Label => $hint->[0], ValueSpanClass => 'current-value' &>
  <span class="text-muted"><% $hint->[1] %></span>
</&>
% }

% if ( $cond{'RequireCurrent'} ) {
  <&| /Elements/LabeledValue, Label => loc( "[_1]'s current password",$session{'CurrentUser'}->Name()) &>
    <input type="password" class="form-control" name="<% $Name[0] %>" size="16" autocomplete="off" />
  </&>
% }

<&| /Elements/LabeledValue, Label => loc("New password") &>
  <input type="password" class="form-control" name="<% $Name[1] %>" size="16" autocomplete="off" />
</&>
<&| /Elements/LabeledValue, Label => loc("Retype Password") &>
  <input type="password" class="form-control" name="<% $Name[2] %>" size="16" autocomplete="off" />
</&>
% }

<%ARGS>
$User
@Name => qw(CurrentPass NewPass1 NewPass2)
</%ARGS>
<%INIT>

my %cond = $User->CurrentUserRequireToSetPassword;

my $policy_text = sub { join( " \N{MIDDLE DOT} ", $User->PasswordPolicyRequirements(@_) ) };

my @policy_hints;
if ( $User->Id ) {
    my $text = $policy_text->();
    push @policy_hints, [ loc('Password requirements'), $text ] if $text;
}
else {
    my $privileged   = $policy_text->( $User->EffectivePasswordPolicy( Privileged => 1 ) );
    my $unprivileged = $policy_text->( $User->EffectivePasswordPolicy( Privileged => 0 ) );
    if ( $privileged eq $unprivileged ) {
        push @policy_hints, [ loc('Password requirements'), $privileged ] if $privileged;
    }
    else {
        push @policy_hints, [ loc('Password requirements (privileged)'),   $privileged ]   if $privileged;
        push @policy_hints, [ loc('Password requirements (unprivileged)'), $unprivileged ] if $unprivileged;
    }
}

my $password_status
  = $User->HasPassword ? loc('Password is set') : loc('No password set');

my $can_admin_users = $session{'CurrentUser'}->HasRight( Right => 'AdminUsers', Object => RT->System );
my $is_admin_view   = $User->Id && $session{'CurrentUser'}->Id != $User->Id && $can_admin_users;
my $is_admin_create = !$User->Id && $can_admin_users;

</%INIT>
