niklas.m/allmende-essen
1
0
Fork 0
Code Issues 4 Pull Requests Packages Projects Releases Wiki Activity

Auth: Require logged in user to delete registrations, team_registrations and subscriptions

Browse Source
This commit is contained in:
Niklas Meinzer
2025-10-16 10:54:20 +02:00
parent 1df2ecbebf
commit bfe40a4837
4 changed files with 40 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/meal_manager/templates/event.html
View File

@@ -3,11 +3,13 @@
{% for entry in event.team | selectattr("work_type", "equalto", work_type)%}
<div class="d-inline-flex align-items-center bg-light border rounded-pill px-3 py-1 m-1">
<span class="me-2">{{ entry.person_name }}</span>
{% if user and event.registration_open -%}
<button type="button" class="btn btn-sm p-0 border-0 bg-transparent text-muted">
<a href="/event/{{event.id}}/register_team/{{entry.id}}/delete">
<i class="bi bi-trash"></i>
</a>
</button>
{% endif -%}
</div>
{% endfor %}
{%- endmacro %}
@@ -24,10 +26,10 @@
<div class="col-md-4 d-flex justify-content-center align-items-center flex-column">
<p class="text-muted w-100 mb-2">Anmeldung schließt {{ event.registration_deadline.strftime('%A, %d.%m.%Y, %H:%M Uhr') }}</p>
<!-- Button trigger modal -->
<button type="button" class="btn btn-primary mb-2 w-100" {% if event.registration_deadline < now %}disabled{% endif%} data-bs-toggle="modal" data-bs-target="#registration">
<button type="button" class="btn btn-primary mb-2 w-100" {% if not (event.registration_open or (user and user.admin)) %}disabled{% endif%} data-bs-toggle="modal" data-bs-target="#registration">
Anmeldung hinzufügen
</button>
<button type="button" class="btn btn-primary mb-2 w-100" {% if event.all_teams_max() or event.event_time < now %}disabled{% endif %} data-bs-toggle="modal" data-bs-target="#teamRegistration">
<button type="button" class="btn btn-primary mb-2 w-100" {% if event.all_teams_max() or event.in_the_past %}disabled{% endif %} data-bs-toggle="modal" data-bs-target="#teamRegistration">
Dienst übernehmen
</button>
{% if event.recipe_link %}
@@ -129,7 +131,7 @@
<th scope="col">Kinder</th>
<th scope="col">Kleinkinder</th>
<th scope="col">Kommentar</th>
<th scope="col">Löschen</th>
{% if user %}<th scope="col">Löschen</th>{% endif %}
</tr>
</thead>
<tbody>
@@ -140,7 +142,7 @@
<td>{{ reg.num_children_meals }}</td>
<td>{{ reg.num_small_children_meals }}</td>
<td>{% if reg.comment %}{{ reg.comment }}{% endif %}</td>
<td><a href="/event/{{event.id}}/registration/{{reg.household_id}}/delete"><i class="bi bi-trash"></i></a></td>
{% if user %}<td><a href="/event/{{event.id}}/registration/{{reg.household_id}}/delete"><i class="bi bi-trash"></i></a></td>{% endif %}
</tr>
{% endfor %}
</tbody>
@@ -154,9 +156,9 @@
<div class="card-body">
<div class="d-flex justify-content-between align-items-start mb-2">
<h5 class="card-title mb-0">{{ reg.household.name }}</h5>
<a href="/event/{{event.id}}/registration/{{reg.household_id}}/delete" class="text-danger">
{% if user %}<a href="/event/{{event.id}}/registration/{{reg.household_id}}/delete" class="text-danger">
<i class="bi bi-trash"></i>
</a>
</a>{% endif -%}
</div>
<div class="row mt-3">
<div class="col-3 text-center">

4
src/meal_manager/templates/subscribe.html
View File

@@ -106,9 +106,9 @@
<div class="card-body py-2 px-3">
<div class="d-flex justify-content-between align-items-center mb-1">
<h6 class="mb-0">{{ sub.household.name }}</h6>
<a href="/subscribe/{{sub.household.id}}/delete" class="text-danger">
{% if user %}<a href="/subscribe/{{sub.household.id}}/delete" class="text-danger">
<i class="bi bi-trash"></i>
</a>
</a>{% endif %}
</div>
<div class="row g-2">
<div class="col-3 text-center">