mirrors/swt23w23
1
0
Fork 0
mirror of https://github.com/st-tu-dresden-praktikum/swt23w23 synced 2024-07-19 21:04:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add sec:authorize to catalog and orders

Browse source 
Closes #22
This commit is contained in:
Mathis Kral 2023-11-15 18:17:27 +01:00 committed by Simon Bruder
parent 9eeb25a281
commit a276701c8a
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/main/resources/templates/catalog.html
View file

@ -30,7 +30,7 @@
</ul> </ul>
</td> </td>
<td th:text="${catalogEntry.getTotalCost()}"> <td th:text="${catalogEntry.getTotalCost()}">
<td> <td sec:authorize="hasRole('ADMIN')">
<form method="post" th:action="@{/catalog/remove}"> <form method="post" th:action="@{/catalog/remove}">
<input type="hidden" name="catalogEntryID" th:value="${catalogEntry.getId()}"> <input type="hidden" name="catalogEntryID" th:value="${catalogEntry.getId()}">
<button type="submit">Entfernen</button> <button type="submit">Entfernen</button>
@ -40,7 +40,7 @@
</table> </table>
</div> </div>
<div> <div sec:authorize="hasRole('ADMIN')">
<form th:action="@{/catalog_editor}"> <form th:action="@{/catalog_editor}">
<button type="submit">Hinzufügen</button> <button type="submit">Hinzufügen</button>
</form> </form>

2
src/main/resources/templates/orders.html
View file

@ -42,7 +42,7 @@
<th:block th:text="${order.getTotalCost()}"/> <th:block th:text="${order.getTotalCost()}"/>
<th:block th:text="€"/> <th:block th:text="€"/>
</td> </td>
<td> <td sec:authorize="hasRole('ADMIN')">
<form method="post" th:action="@{/orders/remove}"> <form method="post" th:action="@{/orders/remove}">
<input type="hidden" name="orderID" value="0" th:value="${order.getId()}"/> <input type="hidden" name="orderID" value="0" th:value="${order.getId()}"/>
<input type="submit" value="remove" th:value="Entfernen"/> <input type="submit" value="remove" th:value="Entfernen"/>