{% extends 'base.html' %}{% block content %}<section class="wrap dashboard section"><div class="dash-heading"><div><span class="eyebrow">ACCESS MANAGEMENT</span><h1>Users & <em>roles.</em></h1></div></div><div class="panel table-scroll"><table><thead><tr><th>Name</th><th>Email</th><th>Role</th><th>Company ID</th><th>Active</th></tr></thead><tbody>{% for u in users %}<tr><td>{{ u.name }}</td><td>{{ u.email }}</td><td>{{ u.role }}</td><td>{{ u.company_id or '—' }}</td><td>{{ 'Yes' if u.active else 'No' }}</td></tr>{% endfor %}</tbody></table></div><div class="panel form-panel quote-builder"><span class="eyebrow">NEW AUTHORIZED USER</span><h2>Create a staff or buyer login</h2><form action="/admin/users" method="post"><input type="hidden" name="csrf" value="{{ csrf }}"><div class="fields"><label>Full name<input name="name" required></label><label>Email<input name="email" type="email" required></label><label>Role<select name="role">{% for r in roles %}<option>{{ r }}</option>{% endfor %}</select></label><label>Company for buyer (required for Buyer role)<select name="company_id"><option value="0">No company (staff)</option>{% for c in companies %}<option value="{{ c.id }}">#{{ c.id }} · {{ c.name }}</option>{% endfor %}</select></label></div><label>Initial password (at least 12 characters)<input name="password" type="password" minlength="12" required autocomplete="new-password"></label><p class="note">Development-only user provisioning: use an approved secure invite/password-reset process before live launch; never send passwords by ordinary email.</p><button class="button">Create Account</button></form></div></section>{% endblock %}