Files
notifications-admin/app/templates/views/edit-user-permissions.html
Leo Hemsted f7f9dd8530 fix user permissions save button sometimes deleting
when you hit the delete button, it flashes the delete button and takes
you to the `/service/../user/../delete` url. If you then click the save
button, it would make a POST to the delete URL... and delete the user.

now the page stays on the edit url, but adds a `?delete=yes` query
string. The dangerous flash banner now has an action field which
defines where the browser will make the POST to (which remains at
/delete).
2019-03-26 15:52:37 +00:00

47 lines
1.5 KiB
HTML

{% extends "withnav_template.html" %}
{% from "components/textbox.html" import textbox %}
{% from "components/page-footer.html" import page_footer %}
{% from "components/form.html" import form_wrapper %}
{% from "components/banner.html" import banner %}
{% block service_page_title %}
{{ user.name or user.email_localpart }}
{% endblock %}
{% block maincolumn_content %}
{% if delete %}
{{ banner(
'Are you sure you want to remove {}?'.format(user.name),
type='dangerous',
delete_button='Yes, remove',
action=url_for('.remove_user_from_service', service_id=current_service.id, user_id=user.id)
) }}
{% endif %}
<h1 class="heading-large">
{{ user.name or user.email_localpart }}
</h1>
<p>
{{ user.email_address }}&emsp;<a href="{{ url_for('.edit_user_email', service_id=current_service.id, user_id=user.id)}}">Change</a>
</p>
{% if mobile_number %}
<p id="user_mobile_number">
{{ mobile_number }}&emsp;<a href="{{ url_for('.edit_user_mobile_number', service_id=current_service.id, user_id=user.id)}}">Change</a>
</p>
{% endif %}
<div class="grid-row">
{% call form_wrapper(class="column-three-quarters") %}
{% include 'views/manage-users/permissions.html' %}
{{ page_footer(
'Save',
delete_link=url_for('.edit_user_permissions', service_id=current_service.id, user_id=user.id, delete='yes'),
delete_link_text='Remove user from service'
) }}
{% endcall %}
</div>
{% endblock %}