function ACL(backend_url) {
	that = this;

	that.url = backend_url;

	that.kp_timer = null;

	that.self = [];

	that.allow_cid = [];
	that.allow_gid = [];
	that.deny_cid  = [];
	that.deny_gid  = [];

	that.group_uids = {};
	that.group_ids = {};
	that.contact_uids = {};
	that.contact_ids = {};

	that.bang = '';

	that.selected_id = '';

	that.info         = $("#acl-info");
	that.list         = $("#acl-list");
	that.list_content = $("#acl-list-content");
	that.item_tpl     = unescape($(".acl-list-item[rel=acl-template]").html());
	that.showall      = $("#acl-showall");
	that.onlyme       = $("#acl-onlyme");
	that.custom       = $("#acl-custom");
	that.acl_select   = $("#acl-select");

	// set the initial ACL lists in case the enclosing form gets submitted before the ajax loader completes.
	//that.on_submit();

	/*events*/

	$(document).ready(function() {

		that.acl_select.change(function(event) {
			var option = that.acl_select.val();

			if(option != 'public' && option != 'onlyme' && option != 'custom') { // limited to one selected group
				that.on_showgroup(event);
			}

			if(option == 'public') { // public
				that.on_showall(event);
			}

			if(option == 'onlyme') { // limited to one self
				that.on_onlyme(event);
			}

			if(option == 'custom') { // limited to custom selection
				that.on_custom(event);
			}
		});

		$(document).on('focus', '.acl-form', that.get_form_data);
		$(document).on('click', '.acl-form', that.get_form_data);
		$(document).on('click', '.acl-form-trigger', that.get_form_data);

		$(document).on('click','.acl-button-show',that.on_button_show);
		$(document).on('click','.acl-button-hide',that.on_button_hide);

		$("#acl-search").keypress(that.on_search);

		/* startup! */
		that.get(0,15000);
		//that.on_submit();
	});
}


ACL.prototype.get_form_data = function(event) {

		form_id = $(this).data('form_id');
		that.form_id = $('#' + form_id);

		that.allow_cid = (that.form_id.data('allow_cid') || []);
		that.allow_gid = (that.form_id.data('allow_gid') || []);
		that.deny_cid  = (that.form_id.data('deny_cid') || []);
		that.deny_gid  = (that.form_id.data('deny_gid') || []);

		that.bang = (that.form_id.data('bang') || '');

		that.update_view();
		that.on_submit();

}

// no longer called only on submit - call to update whenever a change occurs to the acl list.
ACL.prototype.on_submit = function() {

	$('.acl-field').remove();

	$(that.allow_gid).each(function(i,v) {
		that.form_id.append("<input class='acl-field' type='hidden' name='group_allow[]' value='"+v+"'>");
	});
	$(that.allow_cid).each(function(i,v) {
		that.form_id.append("<input class='acl-field' type='hidden' name='contact_allow[]' value='"+v+"'>");
	});
	$(that.deny_gid).each(function(i,v) {
		that.form_id.append("<input class='acl-field' type='hidden' name='group_deny[]' value='"+v+"'>");
	});
	$(that.deny_cid).each(function(i,v) {
		that.form_id.append("<input class='acl-field' type='hidden' name='contact_deny[]' value='"+v+"'>");
	});
};

ACL.prototype.search = function() {
	var srcstr = $("#acl-search").val();
	that.list_content.html("");
	that.get(0, 15000, srcstr);
};

ACL.prototype.on_search = function(event) {
	if (that.kp_timer) {
		clearTimeout(that.kp_timer);
	}
	that.kp_timer = setTimeout( that.search, 1000);
};

ACL.prototype.on_onlyme = function(event) {
	// preventDefault() isn't called here as we want state changes from update_view() to be applied to the radiobutton
	event.stopPropagation();

	that.allow_cid = [that.self[0]];
	that.allow_gid = [];
	that.deny_cid  = [];
	that.deny_gid  = [];


	that.update_view();
	that.on_submit();

	return true; // return true so that state changes from update_view() will be applied
};

ACL.prototype.on_showall = function(event) {
	// preventDefault() isn't called here as we want state changes from update_view() to be applied to the radiobutton
	event.stopPropagation();

	that.allow_cid = [];
	that.allow_gid = [];
	that.deny_cid  = [];
	that.deny_gid  = [];

	that.update_view();
	that.on_submit();

	return true; // return true so that state changes from update_view() will be applied
};

ACL.prototype.on_showgroup = function(event) {

	var xid = that.acl_select.val();
	var cid = '';

	if(xid.length && xid.substr(0,1) == '^') {
		cid = xid.slice(1);
		xid = '';
	}

	// preventDefault() isn't called here as we want state changes from update_view() to be applied to the radiobutton
	event.stopPropagation();

	if (xid.length) {
		that.allow_cid = [];
		that.allow_gid = [xid];
		that.deny_cid  = [];
		that.deny_gid  = [];

	}
	else {
		that.allow_cid = [cid];
		that.allow_gid = [];
		that.deny_cid  = [];
		that.deny_gid  = [];
	}

	that.update_view();
	that.on_submit();

	return true; // return true so that state changes from update_view() will be applied
};


ACL.prototype.on_custom = function(event) {
	// preventDefault() isn't called here as we want state changes from update_view() to be applied to the radiobutton
	event.stopPropagation();

	that.allow_cid = [];
	that.allow_gid = [];
	that.deny_cid  = [];
	that.deny_gid  = [];

	datasrc2src('#acl-list-content .list-group-item img[data-src]');

	that.update_view('custom');
	that.on_submit();

	return true; // return true so that state changes from update_view() will be applied
}

ACL.prototype.on_button_show = function(event) {
	event.preventDefault();
	event.stopImmediatePropagation();
	event.stopPropagation();

	if(!$(this).parent().hasClass("grouphide")) {
		that.set_allow($(this).parent().attr('id'));
		that.on_submit();
	}

	return false;
};

ACL.prototype.on_button_hide = function(event) {
	event.preventDefault();
	event.stopImmediatePropagation();
	event.stopPropagation();

	that.set_deny($(this).parent().attr('id'));
	that.on_submit();

	return false;
};

ACL.prototype.set_allow = function(itemid) {
	type = itemid[0];
	id   = decodeURIComponent(itemid.substr(1));
	switch(type) {
		case "g":
			if (that.allow_gid.indexOf(id)<0) {
				that.allow_gid.push(id);
			}else {
				that.allow_gid.remove(id);
			}
			if (that.deny_gid.indexOf(id)>=0) that.deny_gid.remove(id);
			break;
		case "c":
			if (that.allow_cid.indexOf(id)<0) {
				that.allow_cid.push(id);
			} else {
				that.allow_cid.remove(id);
			}
			if (that.deny_cid.indexOf(id)>=0) that.deny_cid.remove(id);
			break;
	}
	that.update_view('custom');
};

ACL.prototype.set_deny = function(itemid) {
	type = itemid[0];
	id   = decodeURIComponent(itemid.substr(1));
	switch(type) {
		case "g":
			if (that.deny_gid.indexOf(id)<0) {
				that.deny_gid.push(id);
			} else {
				that.deny_gid.remove(id);
			}
			if (that.allow_gid.indexOf(id)>=0) that.allow_gid.remove(id);
			break;
		case "c":
			if (that.deny_cid.indexOf(id)<0) {
				that.deny_cid.push(id);
			} else {
				that.deny_cid.remove(id);
			}
			if (that.allow_cid.indexOf(id)>=0) that.allow_cid.remove(id);
			break;
	}
	that.update_view('custom');
};

ACL.prototype.update_select = function(set) {
	if(set != 'public' && set != 'onlyme' && set != 'custom')  {
		$('#' + set).prop('selected', true );
	}
	that.showall.prop('selected', set === 'public');
	that.onlyme.prop('selected', set === 'onlyme');
	that.custom.prop('selected', set === 'custom');
};

ACL.prototype.update_view = function(value) {

	if(that.form_id) {
		that.form_id.data('allow_cid', that.allow_cid);
		that.form_id.data('allow_gid', that.allow_gid);
		that.form_id.data('deny_cid', that.deny_cid);
		that.form_id.data('deny_gid', that.deny_gid);
	}

	if (that.allow_gid.length === 0 && that.allow_cid.length === 0 && that.deny_gid.length === 0 && that.deny_cid.length === 0 && value !== 'custom') {
		that.list.hide(); //hide acl-list
		that.info.show(); //show acl-info
		that.update_select('public');

		/* jot acl */
		$('#jot-perms-icon, #dialog-perms-icon, #' + that.form_id[0].id + ' .jot-perms-icon').removeClass('fa-lock').addClass('fa-unlock');
		$('#jot-perms-icon').removeClass('jot-lock-warn');
		$('#dbtn-jotnets').show();
		$('.profile-jot-net input').attr('disabled', false);

	}

	else if (that.allow_gid.length === 1 && that.allow_cid.length === 0 && that.deny_gid.length === 0 && that.deny_cid.length === 0 && value !== 'custom') {
		that.list.hide(); //hide acl-list
		that.info.hide(); //show acl-info
		that.selected_id = that.group_ids[that.allow_gid[0]];
		that.update_select(that.selected_id);

		/* jot acl */
		$('#jot-perms-icon, #dialog-perms-icon, #' + that.form_id[0].id + ' .jot-perms-icon').removeClass('fa-unlock').addClass('fa-lock');
		$('#dbtn-jotnets').hide();
		$('.profile-jot-net input').attr('disabled', 'disabled');
	}

	// if value != 'onlyme' we should fall through this one
	else if (that.allow_gid.length === 0 && that.allow_cid.length === 1 && that.allow_cid[0] === that.self[0] && that.deny_gid.length === 0 && that.deny_cid.length === 0 && value !== 'custom') {
		that.list.hide(); //hide acl-list
		that.info.hide(); //show acl-info
		that.update_select('onlyme');

		/* jot acl */
		$('#jot-perms-icon, #dialog-perms-icon, #' + that.form_id[0].id + ' .jot-perms-icon').removeClass('fa-unlock').addClass('fa-lock');
		$('#dbtn-jotnets').hide();
		$('.profile-jot-net input').attr('disabled', 'disabled');
	}
	else if (that.allow_gid.length === 0 && that.allow_cid.length === 1 && that.deny_gid.length === 0 && that.deny_cid.length === 0 && value !== 'custom') {

		if(that.bang && that.bang !== that.allow_cid[0]) {
			that.update_view('custom');
			return;
		}

		that.list.hide(); //hide acl-list
		that.info.hide(); //show acl-info
		that.selected_id = that.contact_ids[that.allow_cid[0]];

		if(that.acl_select.find('option[id="\\^' + that.selected_id + '"]').length === 0) {
			that.update_view('custom');
		}
		else {
			that.update_select('\\^' + that.selected_id);
		}

		/* jot acl */
		$('#jot-perms-icon, #dialog-perms-icon, #' + that.form_id[0].id + ' .jot-perms-icon').removeClass('fa-unlock').addClass('fa-lock');
		$('#dbtn-jotnets').hide();
		$('.profile-jot-net input').attr('disabled', 'disabled');
	}

	else {

		that.list.show(); //show acl-list
		datasrc2src('#acl-list-content .list-group-item img[data-src]');
		that.info.hide(); //hide acl-info
		that.update_select('custom');
		if(typeof value === 'undefined') {
			value = 'custom';
		}

		/* jot acl */
		if(that.allow_gid.length === 0 && that.allow_cid.length === 0 && that.deny_gid.length === 0 && that.deny_cid.length === 0 && value === 'custom') {
			$('#jot-perms-icon, #dialog-perms-icon, #' + that.form_id[0].id + ' .jot-perms-icon').removeClass('fa-lock').addClass('fa-unlock');
			$('#dbtn-jotnets').show();
			$('.profile-jot-net input').attr('disabled', false);
		}
		else {
			$('#jot-perms-icon, #dialog-perms-icon, #' + that.form_id[0].id + ' .jot-perms-icon').removeClass('fa-unlock').addClass('fa-lock');
			$('#dbtn-jotnets').hide();
			$('.profile-jot-net input').attr('disabled', 'disabled');
		}
	}

	if(value === 'custom') {
		$("#acl-list-content .acl-list-item").each(function() {
			$(this).removeClass("groupshow grouphide");
		});

		$("#acl-list-content .acl-list-item").each(function() {
			itemid = $(this).attr('id');
			type = itemid[0];
			id   = decodeURIComponent(itemid.substr(1));

			btshow = $(this).children(".acl-button-show").removeClass("btn-success").addClass("btn-outline-success");
			bthide = $(this).children(".acl-button-hide").removeClass("btn-danger").addClass("btn-outline-danger");

			switch(type) {
				case "g":
					var uclass = "";
					if (that.allow_gid.indexOf(id)>=0) {
						btshow.removeClass("btn-outline-success").addClass("btn-success");
						bthide.removeClass("btn-danger").addClass("btn-outline-danger");
						uclass="groupshow";
					}
					if (that.deny_gid.indexOf(id)>=0) {
						btshow.removeClass("btn-success").addClass("btn-outline-success");
						bthide.removeClass("btn-outline-danger").addClass("btn-danger");
						uclass = "grouphide";
					}
					$(that.group_uids[id]).each(function(i, v) {
						if(uclass == "grouphide")
							// we need attr selection here because the id can include an @ (diaspora/friendica xchans)
							$('[id="c' + v + '"]').removeClass("groupshow");
						if(uclass !== "") {
							var cls = $('[id="c' + v + '"]').attr('class');
							if( cls === undefined)
								return true;
							var hiding = cls.indexOf('grouphide');
							if(hiding == -1)
								$('[id="c' + v + '"]').addClass(uclass);
						}
					});
					break;
				case "c":
					if (that.allow_cid.indexOf(id)>=0){
						if(!$(this).hasClass("grouphide") ) {
							btshow.removeClass("btn-outline-success").addClass("btn-success");
							bthide.removeClass("btn-danger").addClass("btn-outline-danger");
						}
					}
					if (that.deny_cid.indexOf(id)>=0){
						btshow.removeClass("btn-success").addClass("btn-outline-success");
						bthide.removeClass("btn-outline-danger").addClass("btn-danger");
						$(this).removeClass("groupshow");
					}
					$(that.contact_uids[id]).each(function(i, v) {
						if(uclass == "grouphide")
							// we need attr selection here because the id can include an @ (diaspora/friendica xchans)
							$('[id="g' + v + '"]').removeClass("groupshow");
						if(uclass !== "") {
							var cls = $('[id="g' + v + '"]').attr('class');
							if( cls === undefined)
								return true;
							var hiding = cls.indexOf('grouphide');
							if(hiding == -1)
								$('[id="g' + v + '"]').addClass(uclass);
						}
					});
					break;

			}
		});
	}
};

ACL.prototype.get = function(start, count, search) {
	var postdata = {
		start: start,
		count: count,
		search: search,
	};

	$.ajax({
		type: 'POST',
		url: that.url,
		data: postdata,
		dataType: 'json',
		success: that.populate
	})
	.done(function() {
		if(search !== undefined)
			datasrc2src('#acl-list-content .list-group-item img[data-src]');
	});
};

ACL.prototype.populate = function(data) {
	$(data.items).each(function(){
		html = "<div class='list-group-item clearfix acl-list-item {4} {7} {5}' id='{2}{3}'>"+that.item_tpl+"</div>";
		html = html.format(this.photo, this.name, this.type, this.xid, '', this.self, this.link, this.taggable);
		if (this.uids !== undefined) {
			that.group_uids[this.xid] = this.uids;
			that.group_ids[this.xid] = this.id;
		}
		else {
			that.contact_ids[this.xid] = this.id;
		}
		if (this.self === 'abook-self') {
			that.self[0] = this.xid;
		}

		that.list_content.append(html);
	});
};