From da24ca79a179a810c0efb65f301fdb73da37172f Mon Sep 17 00:00:00 2001
From: Theo Reichert <theo.reichert@mailbox.tu-dresden.de>
Date: Sat, 16 Dec 2023 13:25:32 +0100
Subject: [PATCH] Update order template only allow values COMPLETED or CANCELED

---
 src/main/resources/templates/orders.html | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/src/main/resources/templates/orders.html b/src/main/resources/templates/orders.html
index a83eb4d..732912e 100644
--- a/src/main/resources/templates/orders.html
+++ b/src/main/resources/templates/orders.html
@@ -12,9 +12,15 @@ SPDX-FileCopyrightText: 2023 swt23w23
 			<div>    <!--th:unless"${cart.empty}"-->
 				<form sec:authorize="hasRole('ADMIN')" method="get" th:action="@{/allOrders}" th:object="${form}" class="mb-3">
 					<label class="form-label">Bestellungsstatus</label>
-					<select class="form-select" for="orderStatus" th:field="*{orderStatus}" th:errorclass="is-invalid">
+					<select class="form-select mb-2" for="orderStatus" th:field="*{orderStatus}" th:errorclass="is-invalid">
 						<option selected name="orderStatus" th:value="${null}" th:text="any"></option>
-						<option th:each="orderStatus : ${T(org.salespointframework.order.OrderStatus).values()}" name="orderStatus" th:value="${orderStatus}" th:text="${orderStatus.toString().replace('_','-').toLowerCase()}"/>
+						<option
+							th:each="orderStatus : ${T(org.salespointframework.order.OrderStatus).values()}"
+							th:if="${orderStatus == T(org.salespointframework.order.OrderStatus).COMPLETED || orderStatus == T(org.salespointframework.order.OrderStatus).CANCELED}"
+							name="orderStatus"
+							th:value="${orderStatus}"
+							th:text="${orderStatus.toString().replace('_','-').toLowerCase()}"
+						/>
 					</select>
 					<div th:if="${#fields.hasErrors('orderStatus')}" class="invalid-feedback">Ungültiger Buchungsstatus.</div>
 					<button class="btn btn-primary" type="submit" th:text="${'suchen'}"></button>