src/Admin/Views/Shared/_Layout.cshtml

@using Bit.Admin.Enums;
@using Bit.Core

@inject SignInManager<IdentityUser> SignInManager
@inject Bit.Core.Settings.GlobalSettings GlobalSettings
@inject Bit.Admin.Services.IAccessControlService AccessControlService
@inject Bit.Core.Services.IFeatureService FeatureService

@{
    var canViewUsers = AccessControlService.UserHasPermission(Permission.User_List_View);
    var canViewOrgs = AccessControlService.UserHasPermission(Permission.Org_List_View);
    var canViewProviders = AccessControlService.UserHasPermission(Permission.Provider_List_View);
    var canChargeBraintree = AccessControlService.UserHasPermission(Permission.Tools_ChargeBrainTreeCustomer);
    var canCreateTransaction = AccessControlService.UserHasPermission(Permission.Tools_CreateEditTransaction);
    var canPromoteAdmin = AccessControlService.UserHasPermission(Permission.Tools_PromoteAdmin);
    var canPromoteProviderServiceUser = FeatureService.IsEnabled(FeatureFlagKeys.PromoteProviderServiceUserTool) &&
                                        AccessControlService.UserHasPermission(Permission.Tools_PromoteProviderServiceUser);
    var canGenerateLicense = AccessControlService.UserHasPermission(Permission.Tools_GenerateLicenseFile);
    var canManageTaxRates = AccessControlService.UserHasPermission(Permission.Tools_ManageTaxRates);
    var canManageStripeSubscriptions = AccessControlService.UserHasPermission(Permission.Tools_ManageStripeSubscriptions);
    var canProcessStripeEvents = AccessControlService.UserHasPermission(Permission.Tools_ProcessStripeEvents);
    var canMigrateProviders = AccessControlService.UserHasPermission(Permission.Tools_MigrateProviders);

    var canViewTools = canChargeBraintree || canCreateTransaction || canPromoteAdmin || canPromoteProviderServiceUser ||
                        canGenerateLicense || canManageTaxRates || canManageStripeSubscriptions;
}

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="robots" content="noindex,nofollow" />
    <title>@ViewData["Title"] - Bitwarden Admin Portal</title>

    <link rel="stylesheet" href="~/assets/site.css" asp-append-version="true" />
</head>
<body>
    <nav class="navbar navbar-expand-md navbar-dark bg-dark mb-4">
        <div class="container">
            <a class="navbar-brand" asp-controller="Home" asp-action="Index">
                <i class="fa fa-lg fa-fw fa-shield"></i> Admin
            </a>
            <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarCollapse"
                    aria-controls="navbarCollapse" aria-expanded="false" aria-label="Toggle navigation">
                <span class="navbar-toggler-icon"></span>
            </button>
            <div class="collapse navbar-collapse" id="navbarCollapse">
                <ul class="navbar-nav me-auto mb-2 mb-md-0">
                    @if (SignInManager.IsSignedIn(User))
                    {
                        @if (canViewUsers)
                        {
                            <li class="nav-item" active-controller="Users">
                                <a class="nav-link" asp-controller="Users" asp-action="Index">Users</a>
                            </li>
                        }
                        @if (canViewOrgs)
                        {
                            <li class="nav-item" active-controller="Organizations">
                                <a class="nav-link" asp-controller="Organizations" asp-action="Index">Organizations</a>
                            </li>
                        }
                        @if (!GlobalSettings.SelfHosted)
                        {
                            @if (canViewProviders)
                            {
                                <li class="nav-item" active-controller="Providers">
                                    <a class="nav-link" asp-controller="Providers" asp-action="Index">Providers</a>
                                </li>
                            }
                            @if (canViewTools)
                            {
                                <li class="nav-item dropdown" active-controller="tools">
                                    <a class="nav-link dropdown-toggle" href="#" id="toolsDropdown" role="button"
                                    data-bs-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
                                        Tools
                                    </a>
                                    <ul class="dropdown-menu" aria-labelledby="toolsDropdown">
                                        @if (canChargeBraintree)
                                        {
                                            <a class="dropdown-item" asp-controller="Tools" asp-action="ChargeBraintree">
                                                Charge Braintree Customer
                                            </a>
                                        }
                                        @if (canCreateTransaction)
                                        {
                                            <a class="dropdown-item" asp-controller="Tools" asp-action="CreateTransaction">
                                                Create Transaction
                                            </a>
                                        }
                                        @if (canPromoteAdmin)
                                        {
                                            <a class="dropdown-item" asp-controller="Tools" asp-action="PromoteAdmin">
                                                Promote Organization Admin
                                            </a>
                                        }
                                        @if (canPromoteProviderServiceUser)
                                        {
                                            <a class="dropdown-item" asp-controller="Tools" asp-action="PromoteProviderServiceUser">
                                                Promote Provider Service User
                                            </a>
                                        }
                                        @if (canGenerateLicense)
                                        {
                                            <a class="dropdown-item" asp-controller="Tools" asp-action="GenerateLicense">
                                                Generate License
                                            </a>
                                        }
                                        @if (canManageTaxRates)
                                        {
                                            <a class="dropdown-item" asp-controller="Tools" asp-action="TaxRate">
                                                Manage Tax Rates
                                            </a>
                                        }
                                        @if (canManageStripeSubscriptions)
                                        {
                                            <a class="dropdown-item" asp-controller="Tools" asp-action="StripeSubscriptions">
                                                Manage Stripe Subscriptions
                                            </a>
                                        }
                                         @if (canProcessStripeEvents)
                                        {
                                            <a class="dropdown-item" asp-controller="ProcessStripeEvents" asp-action="Index">
                                                Process Stripe Events
                                            </a>
                                        }
                                        @if (canMigrateProviders)
                                        {
                                            <a class="dropdown-item" asp-controller="MigrateProviders" asp-action="index">
                                                Migrate Providers
                                            </a>
                                        }
                                    </ul>
                                </li>
                            }
                        }
                    }
                    @if (GlobalSettings.SelfHosted)
                    {
                        <li class="nav-item">
                            <a class="nav-link" href="https://help.bitwarden.com/hosting/" target="_blank"
                                rel="noreferrer">Docs</a>
                        </li>
                    }
                </ul>
                @if (SignInManager.IsSignedIn(User))
                {
                    <form asp-controller="Login" asp-action="Logout" method="post">
                        <button type="submit" class="btn btn-sm btn-secondary">Log Out</button>
                    </form>
                }
                else
                {
                    <a class="btn btn-sm btn-secondary" asp-controller="Login" asp-action="Index">Log In</a>
                }
            </div>
        </div>
    </nav>

    <main role="main" class="container">
        @RenderBody()
    </main>

    <footer class="container mb-4">
        <hr />
        &copy; @DateTime.Now.Year, Bitwarden Inc.
    </footer>

    <script src="~/assets/site.js" asp-append-version="true"></script>

    @if (TempData["Error"] != null)
    {
        <script>
            $(document).ready(function () {
                toastr.error("@TempData["Error"]")
            });
        </script>
    }
    @if (TempData["Success"] != null)
    {
        <script>
            $(document).ready(function () {
                toastr.success("@TempData["Success"]")
            });
        </script>
    }

    @RenderSection("Scripts", required: false)
</body>
</html>