fix security issue

[selectricity-live] / app / views / election / edit_voters.rhtml

diff --git a/app/views/election/edit_voters.rhtml b/app/views/election/edit_voters.rhtml
index 1e98fbaf93d39ac0dd636d14fe1675749af94203..770c5ecdabed0819ea47a1a4479d757345941147 100644 (file)
--- a/app/views/election/edit_voters.rhtml
+++ b/app/views/election/edit_voters.rhtml
@@ -1,10 +1,51 @@
-<% @edit = true %>
-<h1>Edit Voter List</h1>
+<div id="title-header">
+  <span class="header">Edit Voter List</span>
+  <span class="subheader"></span>
+</div>

 
 

+<% if @election.active == 0 %>
+
+<p id="unauth_notice" <%= 'style="display: none;"' if @election.authenticated %>>
+<% if @election.kiosk? %>
+  <em>Because you have enabled kiosk mode, there will be no registration of voters.</em>
+<% end %>
+Anyone will be able to vote in this election.</p>
+
+<div id="voter_info_box" <%= 'style="display: none;"' unless @election.authenticated %>>

 <%= render :partial => 'voter_list' %>
 
 <% form_tag (:action => 'edit_voters', :id => @election.id) do %>
 <%= render :partial => 'voters_form' %>
 <% end %>
 <%= render :partial => 'voter_list' %>
 
 <% form_tag (:action => 'edit_voters', :id => @election.id) do %>
 <%= render :partial => 'voters_form' %>
 <% end %>

+</div>
+
+<% unless @election.kiosk? %>
+  <%= check_box :election, :authenticated %> Only allow registered voters 
+<% end %>
+
+<%= observe_field "election_authenticated",
+      :url => { :action => 'toggle_authenticated', :id => @election.id },
+      :complete => 'Element.toggle($("voter_info_box")); Element.toggle($("unauth_notice"));',
+      :with => 'authenticated' %>
+
+<script type="text/javascript">
+</script>
+
+<div class="normal-header">
+  <span class="header">Continue</span>
+  <span class="subheader"></span>
+</div>
+
+<p>When you are done entering voters, please click the button below
+to proceed to the next step.</p>
+
+<%= button_to 'Proceed to Next Step', :action => 'show', :id => @election.id %>
+
+<% else %>
+
+<p>You can not edit the list of voters once the election has begun.
+please return to the <%= link_to "election overview page", :action =>
+'show', :id => @election.id %>.</p>
+
+<% end %>

 
 

-<%= button_to 'Done!', :action => 'show', :id => @election.id %>