3ce8d051bc
- Replace nested remove form with a submit button using HTML5 formaction to post directly to /my/team/{team_id}/player/{player_id}/remove
- Prevent outer save form from intercepting submission; preserves CSRF; confirmation retained; redirects to team page
- Replace user_has_group helper with request.env.user.has_group in QWeb to prevent NoneType callable errors
Verification:
- Edit Player page renders without 500 error
- Clicking Remove removes the player and returns 303 redirect to /my/team/{team_id}
- Success notification displayed on team page
Notes:
- Removal route already implemented in controller (TeamManagementPortal.portal_remove_player)
|
||
|---|---|---|
| .. | ||
| controllers | ||
| data | ||
| i18n | ||
| migrations/18.0.1.7.0 | ||
| models | ||
| notes | ||
| security | ||
| static/description | ||
| tests | ||
| views | ||
| wizards | ||
| __init__.py | ||
| __manifest__.py | ||
| PROJECT_TASK_PORTAL_SECURITY.md | ||