fix filter

This commit is contained in:
aminhashemi92 2025-09-13 12:13:08 +03:30
parent e9dec3292c
commit 5dde5335f1

View file

@ -151,35 +151,10 @@
<option value="">همه</option> <option value="">همه</option>
{% for val, label in status_choices %} {% for val, label in status_choices %}
<option value="{{ val }}" {% if filter_status == val %}selected{% endif %}>{{ label }}</option> <option value="{{ val }}" {% if filter_status == val %}selected{% endif %}>{{ label }}</option>
{% endfor %}@require_POST {% endfor %}
@login_required
def delete_request(request, instance_id):
"""حذف درخواست"""
instance = get_object_or_404(ProcessInstance, id=instance_id)
# Only BROKER can delete requests and only within their scope
try:
profile = getattr(request.user, 'profile', None)
if not (profile and profile.has_role(UserRoles.BROKER)):
return JsonResponse({'success': False, 'message': 'فقط کارگزار مجاز به حذف درخواست است'}, status=403)
# Enforce ownership by broker (prevent deleting others' requests)
if instance.broker_id and profile.broker and instance.broker_id != profile.broker.id:
return JsonResponse({'success': False, 'message': 'شما مجاز به حذف این درخواست نیستید'}, status=403)
except Exception:
return JsonResponse({'success': False, 'message': 'فقط کارگزار مجاز به حذف درخواست است'}, status=403)
code = instance.code
if instance.status == 'completed':
return JsonResponse({
'success': False,
'message': 'درخواست تکمیل شده نمی‌تواند حذف شود'
})
instance.delete()
return JsonResponse({
'success': True,
'message': f'درخواست {code} با موفقیت حذف شد'
})
</select> </select>
</div> </div>
{% if request.user|is_admin or request.user|is_manager or request.user|is_accountant %}
<div class="col-sm-6 col-md-3"> <div class="col-sm-6 col-md-3">
<label class="form-label">امور</label> <label class="form-label">امور</label>
<select class="form-select" name="affairs"> <select class="form-select" name="affairs">
@ -189,6 +164,8 @@
{% endfor %} {% endfor %}
</select> </select>
</div> </div>
{% endif %}
{% if request.user|is_admin or request.user|is_manager or request.user|is_accountant %}
<div class="col-sm-6 col-md-3"> <div class="col-sm-6 col-md-3">
<label class="form-label">کارگزار</label> <label class="form-label">کارگزار</label>
<select class="form-select" name="broker"> <select class="form-select" name="broker">
@ -198,6 +175,7 @@
{% endfor %} {% endfor %}
</select> </select>
</div> </div>
{% endif %}
<div class="col-sm-6 col-md-3"> <div class="col-sm-6 col-md-3">
<label class="form-label">مرحله فعلی</label> <label class="form-label">مرحله فعلی</label>
<select class="form-select" name="step"> <select class="form-select" name="step">