From c17e15ee6d0a7ca9921a00a143e3e3e9f3dc7626 Mon Sep 17 00:00:00 2001
From: Holger Frey <mail@holgerfrey.de>
Date: Tue, 10 Oct 2017 14:03:10 +0200
Subject: [PATCH] multiple selection in order list only for purchasers and
 admins

---
 ordr2/templates/orders/list.jinja2 | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/ordr2/templates/orders/list.jinja2 b/ordr2/templates/orders/list.jinja2
index 97def3c..336bf81 100644
--- a/ordr2/templates/orders/list.jinja2
+++ b/ordr2/templates/orders/list.jinja2
@@ -56,9 +56,11 @@
 
                         <table class="table">
                             <thead>
-                                <th class="center">
-                                    <input type="checkbox" value="all" name="mark_all" id="mark_all">
-                                </th>
+                                {% if request.has_permission('edit', context) or request.has_permission('delete', context) %}
+                                    <th class="center">
+                                        <input type="checkbox" value="all" name="mark_all" id="mark_all">
+                                    </th>
+                                {% endif %}
                                 {{ macros.sortable_table_header('Date Created', 'created') }}
                                 {{ macros.sortable_table_header('CAS / Description', 'cas') }}
                                 {{ macros.sortable_table_header('Vendor', 'vendor') }}
@@ -76,9 +78,11 @@
                             <tbody>
                                 {% for order in orders %}
                                     <tr>
-                                        <td class="center">
-                                            <input type="checkbox" name="marked" value="{{ order.model.id }}">
-                                        </td>
+                                        {% if request.has_permission('edit', context) or request.has_permission('delete', context) %}
+                                            <td class="center">
+                                                <input type="checkbox" name="marked" value="{{ order.model.id }}">
+                                            </td>
+                                        {% endif %}
                                         <td class="column-created">{{ order.model.created_date }}</td>
                                         <td class="column-cas">{{ order.model.cas_description }}</td>
                                         <td class="column-vendor">{{ order.model.vendor }}</td>