diff --git a/apimanager/users/templates/users/detail.html b/apimanager/users/templates/users/detail.html index bfead0d..25daf75 100644 --- a/apimanager/users/templates/users/detail.html +++ b/apimanager/users/templates/users/detail.html @@ -22,7 +22,7 @@

Add Entitlement

{% csrf_token %} - +
@@ -45,7 +45,7 @@ {% if entitlement.entitlement_id %} {% csrf_token %} - +
diff --git a/apimanager/users/views.py b/apimanager/users/views.py index e43821b..6f0ec2d 100644 --- a/apimanager/users/views.py +++ b/apimanager/users/views.py @@ -96,8 +96,8 @@ class AddEntitlementView(LoginRequiredMixin, View): try: urlpath = '/users/{}/entitlements'.format(kwargs['user_id']) payload = { - 'bank_id': request.POST['bank_id'], - 'role_name': request.POST['role_name'], + 'bank_id': request.POST.get('bank_id', ''), + 'role_name': request.POST.get('role_name', ''), } entitlement = api.post(request, urlpath, payload=payload) msg = 'Entitlement with role {} has been added.'.format( @@ -106,9 +106,7 @@ class AddEntitlementView(LoginRequiredMixin, View): except APIError as err: messages.error(request, err) - redirect_url = reverse('users-detail', kwargs={ - 'user_email': request.POST['user_email'], - }) + redirect_url = request.POST.get('next', reverse('users-index')) return HttpResponseRedirect(redirect_url) @@ -123,12 +121,10 @@ class DeleteEntitlementView(LoginRequiredMixin, View): kwargs['user_id'], kwargs['entitlement_id']) api.delete(request, urlpath) msg = 'Entitlement with role {} has been deleted.'.format( - request.POST['role_name']) + request.POST.get('role_name', '')) messages.success(request, msg) except APIError as err: messages.error(request, err) - redirect_url = reverse('users-detail', kwargs={ - 'user_email': request.POST['user_email'], - }) + redirect_url = request.POST.get('next', reverse('users-index')) return HttpResponseRedirect(redirect_url)