Add confirmation before deletion (#289)

Prompt user for confirmation before deleting storage service
or fetch job.

AIPscan/Aggregator/templates/confirm.html

@@ -0,0 +1,8 @@
+{% extends "base.html" %}
+
+{% block content %}
+<form method="GET" action="{{ request.url }}">
+  <input type="hidden" name="confirm" value="1" />
+  <input type="submit" value="{{ action }}" class='btn btn-danger' /> <a href="{{ url_for(cancel_route) }}" class='btn btn-default'>Cancel</a>
+</form>
+{% endblock %}

AIPscan/Aggregator/tests/test_views.py

@@ -67,5 +67,5 @@ def test_delete_fetch_job(app_with_populated_files, mocker):
 
         mocker.patch("AIPscan.Aggregator.tasks.delete_fetch_job.delay")
 
-        response = test_client.get("/aggregator/delete_fetch_job/1")
+        response = test_client.get("/aggregator/delete_fetch_job/1?confirm=1")
         assert response.status_code == 302

AIPscan/Aggregator/views.py

@@ -15,7 +15,7 @@
     url_for,
 )
 
-from AIPscan import db, typesense_helpers
+from AIPscan import db, decorators, typesense_helpers
 from AIPscan.Aggregator import database_helpers, tasks
 from AIPscan.Aggregator.forms import StorageServiceForm
 from AIPscan.Aggregator.task_helpers import (
@@ -171,6 +171,7 @@ def new_storage_service():
 
 
 @aggregator.route("/delete_storage_service/<storage_service_id>", methods=["GET"])
+@decorators.confirm_required("Delete storage service", "aggregator.ss_default")
 def delete_storage_service(storage_service_id):
     storage_service = StorageService.query.get(storage_service_id)
 
@@ -241,6 +242,7 @@ def new_fetch_job(fetch_job_id):
 
 
 @aggregator.route("/delete_fetch_job/<fetch_job_id>", methods=["GET"])
+@decorators.confirm_required("Delete fetch job", "aggregator.ss_default")
 def delete_fetch_job(fetch_job_id):
     fetch_job = FetchJob.query.get(fetch_job_id)
 

AIPscan/decorators.py

@@ -0,0 +1,21 @@
+from functools import wraps
+
+from flask import render_template, request
+
+
+def confirm_required(action, cancel_route):
+    def decorator(f):
+        @wraps(f)
+        def decorated_function(*args, **kwargs):
+            if request.args.get("confirm"):
+                return f(*args, **kwargs)
+
+            return render_template(
+                "confirm.html",
+                action=action,
+                cancel_route=cancel_route,
+            )
+
+        return decorated_function
+
+    return decorator