bemade-addons/bemade_sports_clinic/controllers
Denis Durepos 3ce8d051bc portal: enable player removal from Edit Player view; fix QWeb group checks
- Replace nested remove form with a submit button using HTML5 formaction to post directly to /my/team/{team_id}/player/{player_id}/remove
- Prevent outer save form from intercepting submission; preserves CSRF; confirmation retained; redirects to team page
- Replace user_has_group helper with request.env.user.has_group in QWeb to prevent NoneType callable errors

Verification:
- Edit Player page renders without 500 error
- Clicking Remove removes the player and returns 303 redirect to /my/team/{team_id}
- Success notification displayed on team page

Notes:
- Removal route already implemented in controller (TeamManagementPortal.portal_remove_player)
2025-08-13 10:43:39 -04:00
..
__init__.py feat: Update bemade_sports_clinic to v18.0.2.0.0 with comprehensive activity management 2025-08-12 09:23:05 -04:00
access_control_mixin.py feat: Production readiness sanitization and access control refactoring 2025-07-31 14:55:18 -04:00
events_portal.py portal: enable player removal from Edit Player view; fix QWeb group checks 2025-08-13 10:43:39 -04:00
patient_injury_portal.py portal: enable player removal from Edit Player view; fix QWeb group checks 2025-08-13 10:43:39 -04:00
player_management_portal.py feat: Production readiness sanitization and access control refactoring 2025-07-31 14:55:18 -04:00
task_management_portal.py feat: Production readiness sanitization and access control refactoring 2025-07-31 14:55:18 -04:00
team_management_portal.py feat: Production readiness sanitization and access control refactoring 2025-07-31 14:55:18 -04:00
team_staff_portal.py portal: enable player removal from Edit Player view; fix QWeb group checks 2025-08-13 10:43:39 -04:00