Changeset 2402 for WAeUP_SRP/base

Timestamp:

19 Oct 2007, 19:51:16 (17 years ago)

Author:

Henrik Bettermann

Message:

fix security for remove_students

correct logging messages

Location:

WAeUP_SRP/base/skins

Files:

• waeup_student/remove_students.py (added)
• waeup_student/remove_students_form.pt (added)
• waeup_student/search_students_form.pt (modified) (1 diff)
• waeup_utilities/remove_students.py (deleted)
• waeup_utilities/remove_students_form.pt (modified) (3 diffs)

WAeUP_SRP/base/skins/waeup_student/search_students_form.pt

@@ -20 +20 @@
       <nobr><a href="statistics_simple_view">Basic Student Statistics</a>
       &nbsp;&nbsp;&nbsp;&nbsp;</nobr>      
-      <nobr><a href="apply_admission_manage">Application Process</a>
-      &nbsp;&nbsp;&nbsp;&nbsp;</nobr>         
+  
       <span tal:condition="is_so">
-         <nobr><a href="view_logs">View Log Files</a>
-         &nbsp;&nbsp;&nbsp;&nbsp;</nobr>
-         <nobr><a href="add_student">Add Student Record</a>        
-        
+          <nobr><a href="apply_admission_manage">Application Process</a>
+          &nbsp;&nbsp;&nbsp;&nbsp;</nobr>      
+          <nobr><a href="view_logs">View Log Files</a>
+          &nbsp;&nbsp;&nbsp;&nbsp;</nobr>
+          <nobr><a href="add_student">Add Student Record</a>        
+          &nbsp;&nbsp;&nbsp;&nbsp;</nobr>
+          <nobr><a href="remove_students">Remove Student Record(s)</a>           
       </span>
       </strong>

WAeUP_SRP/base/skins/waeup_utilities/remove_students_form.pt

@@ -2 +2 @@
            students options/students;
            info options/info|nothing;
-           is_so info/is_so;
            allowed options/allowed|nothing;"
            >
@@ -76 +75 @@
                   <tr tal:condition="student" 
                       tal:attributes="class python:test(repeat['student'].even(), 'even ajaxtd', 'odd ajaxtd')">
-                    <td align="left" valign="middle" style="width: 5px;" 
-                        tal:condition="is_so">
+                    <td align="left" valign="middle" style="width: 5px;">
                       <input type="checkbox" name="ids:list" value="" id="" class="noborder"
                              tal:condition="student/show_checkbox"
@@ -104 +102 @@
             <br />
 
-            <div tal:condition="is_so">
-              <input type="button" value="button_select_all" class="context"
-                     onclick="someJavaScriptFunctionThatWillBeReplaced"
-                     i18n:attributes="value"
-                     tal:attributes="onclick python:'toggleSelect(this, \'%s\', \'%s\')'
-                     % (cpsmcat('button_select_all'), cpsmcat('button_deselect_all'))"
-                     />
-              <input type="submit" name="delete" value="Remove selected"
-                     class="destructive"
-                     tal:attributes="onclick python:'return window.confirm(\'%s\')' %
-                     (cpsmcat('description_confirm_delete'), )" 
-                     />
-            </div>
+            
+            <input type="button" value="button_select_all" class="context"
+                   onclick="someJavaScriptFunctionThatWillBeReplaced"
+                   i18n:attributes="value"
+                   tal:attributes="onclick python:'toggleSelect(this, \'%s\', \'%s\')'
+                   % (cpsmcat('button_select_all'), cpsmcat('button_deselect_all'))"
+                   />
+            <input type="submit" name="delete" value="Remove selected"
+                   class="destructive"
+                   tal:attributes="onclick python:'return window.confirm(\'%s\')' %
+                   (cpsmcat('description_confirm_delete'), )" 
+                   />
+           
 
             <tal:block condition="python:batch_info and batch_info['nb_pages'] > 1">