Changeset 2402 for WAeUP_SRP/base/skins/waeup_utilities

Timestamp:

19 Oct 2007, 19:51:16 (17 years ago)

Author:

Henrik Bettermann

Message:

fix security for remove_students

correct logging messages

Location:

WAeUP_SRP/base/skins/waeup_utilities

Files:

• remove_students.py (deleted)
• remove_students_form.pt (modified) (3 diffs)

WAeUP_SRP/base/skins/waeup_utilities/remove_students_form.pt

@@ -2 +2 @@
            students options/students;
            info options/info|nothing;
-           is_so info/is_so;
            allowed options/allowed|nothing;"
            >
@@ -76 +75 @@
                   <tr tal:condition="student" 
                       tal:attributes="class python:test(repeat['student'].even(), 'even ajaxtd', 'odd ajaxtd')">
-                    <td align="left" valign="middle" style="width: 5px;" 
-                        tal:condition="is_so">
+                    <td align="left" valign="middle" style="width: 5px;">
                       <input type="checkbox" name="ids:list" value="" id="" class="noborder"
                              tal:condition="student/show_checkbox"
@@ -104 +102 @@
             <br />
 
-            <div tal:condition="is_so">
-              <input type="button" value="button_select_all" class="context"
-                     onclick="someJavaScriptFunctionThatWillBeReplaced"
-                     i18n:attributes="value"
-                     tal:attributes="onclick python:'toggleSelect(this, \'%s\', \'%s\')'
-                     % (cpsmcat('button_select_all'), cpsmcat('button_deselect_all'))"
-                     />
-              <input type="submit" name="delete" value="Remove selected"
-                     class="destructive"
-                     tal:attributes="onclick python:'return window.confirm(\'%s\')' %
-                     (cpsmcat('description_confirm_delete'), )" 
-                     />
-            </div>
+            
+            <input type="button" value="button_select_all" class="context"
+                   onclick="someJavaScriptFunctionThatWillBeReplaced"
+                   i18n:attributes="value"
+                   tal:attributes="onclick python:'toggleSelect(this, \'%s\', \'%s\')'
+                   % (cpsmcat('button_select_all'), cpsmcat('button_deselect_all'))"
+                   />
+            <input type="submit" name="delete" value="Remove selected"
+                   class="destructive"
+                   tal:attributes="onclick python:'return window.confirm(\'%s\')' %
+                   (cpsmcat('description_confirm_delete'), )" 
+                   />
+           
 
             <tal:block condition="python:batch_info and batch_info['nb_pages'] > 1">