Groups

Capability matrix. Owner group is immutable; all others are editable inline.

{% for g in groups %}
{{ g.name }} {% if g.is_builtin %}built-in{% endif %} {% if g.description %} — {{ g.description }}{% endif %} {% for cap in capabilities %} {% set mode = perms[g.id|string].get(cap, "deny") %} {% endfor %}
CapabilityMode
{{ cap }} {% if cap_descriptions and cap_descriptions.get(cap) %}
{{ cap_descriptions.get(cap) }}
{% endif %}
{% if g.is_builtin and g.name == "Owner" %} {{ mode }} {% else %} {% for m_val, m_label in [("allow", "Allow"), ("prompt_host", "Prompt"), ("deny", "Deny")] %} {% endfor %} {% endif %}
{% endfor %}