From ad78e22a9dbd898ad93ea577de05aa252627e381 Mon Sep 17 00:00:00 2001
From: kodumbeats <brandon.leckemby@gmail.com>
Date: Fri, 21 Jan 2022 15:35:52 -0500
Subject: [PATCH] Default to collection-level permissions from console

---
 app/views/console/database/collection.phtml | 18 +++++++++---------
 app/views/console/database/index.phtml      |  2 +-
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/app/views/console/database/collection.phtml b/app/views/console/database/collection.phtml
index 93db293ad..46d377430 100644
--- a/app/views/console/database/collection.phtml
+++ b/app/views/console/database/collection.phtml
@@ -527,15 +527,6 @@ $logs = $this->getParam('logs', null);
 
                                 <hr class="margin-top-small" />
 
-                                <div class="row">
-                                    <div class="col span-1"><input name="permission" value="document" type="radio" class="margin-top-no" data-ls-bind="{{project-collection.permission}}" /></div>
-                                    <div class="col span-11">
-                                        <b>Document Level</b>
-                                        <p class="text-fade margin-top-tiny">With Document Level permissions, you have granular access control over every document. Users will only be able to access documents for which they have explicit permissions.</p>
-                                        <p class="text-fade margin-top-tiny">In this permission level, document permissions take precedence and collection permissions are ignored.</p>
-                                    </div>
-                                </div>
-
                                 <div class="row">
                                     <div class="col span-1"><input name="permission" value="collection" type="radio" class="margin-top-tiny" data-ls-bind="{{project-collection.permission}}" /></div>
                                     <div class="col span-11">
@@ -554,6 +545,15 @@ $logs = $this->getParam('logs', null);
                                     </div>
                                 </div>
 
+                                <div class="row">
+                                    <div class="col span-1"><input name="permission" value="document" type="radio" class="margin-top-no" data-ls-bind="{{project-collection.permission}}" /></div>
+                                    <div class="col span-11">
+                                        <b>Document Level</b>
+                                        <p class="text-fade margin-top-tiny">With Document Level permissions, you have granular access control over every document. Users will only be able to access documents for which they have explicit permissions.</p>
+                                        <p class="text-fade margin-top-tiny">In this permission level, document permissions take precedence and collection permissions are ignored.</p>
+                                    </div>
+                                </div>
+
                                 <hr class="margin-top-no" />
 
                                 <button>Update</button>
diff --git a/app/views/console/database/index.phtml b/app/views/console/database/index.phtml
index 951f24c3d..6b485a205 100644
--- a/app/views/console/database/index.phtml
+++ b/app/views/console/database/index.phtml
@@ -108,7 +108,7 @@
                         <label for="collection-name">Name</label>
                         <input type="text" class="full-width" id="collection-name" name="name" required autocomplete="off" maxlength="128" />
 
-                        <input type="hidden" id="collection-permission" name="permission" required value="document" />
+                        <input type="hidden" id="collection-permission" name="permission" required value="collection" />
                         <input type="hidden" id="collection-read" name="read" required data-cast-to="json" value="<?php echo htmlentities(json_encode([])); ?>" />
                         <input type="hidden" id="collection-write" name="write" required data-cast-to="json" value="<?php echo htmlentities(json_encode([])); ?>" />