Users can unset 'Multiple journals' option even having more than one

[Son Nguyen]

Version: master
Platform: all

If an user have more than one journals, the option 'Multiple journals' in the account setting page is 'read-only'.
When I unset it and save.
Actual result: the option have been updated, and only one journal was shown
Expected result: The option should not be changed

[Son Nguyen (ngson2000)]

https://reviews.mahara.org/2587

[Son Nguyen (ngson2000)]

This bug also affects 1.5-1.7

[Son Nguyen (ngson2000)]

This is the regression of the Bug #1166879

[Robert Lyon (robertl-9)]

how are you un-setting a 'read only' field?

[Aaron Wells (u-aaronw)]

To replicate:

1. Log in as a user
2. Go to the Account Settings page and tick the "Multiple journals" checkbox.
3. Create a second journal
4. Go back to the Account Settings page.

Expected result: The "Multiple journals" checkbox should not be editable.
Actual result: The "Multiple journals" checkbox can be unticked.

I'm able to replicate this in Chromium and Firefox. The checkbox is marked readonly, but it's still checkable.

<input type="checkbox" class="checkbox" id="accountprefs_multipleblogs" name="multipleblogs" tabindex="1" readonly="readonly" checked="checked"/>

In Firefox, the checkbox looks grayed-out, but it can still be ticked and unticked. In Chromium it looks perfectly normal.

Apparently, "readonly" does NOT prevent you from ticking or unticking a checkbox, as that is considered "state" rather than "value". The suggested solution is to mark it "disabled". This will prevent the checkbox from sending ANY value through when the form is submitted, however, so it should be combined with further logic in the form submissions code to handle that. Or a hidden input field to pretend the checkbox is actually sending something through. (Although of course we should still do a server-side check of whether the user is allowed to change this setting before processing any hidden input field's value.)

[Aaron Wells (u-aaronw)]

See http://stackoverflow.com/questions/155291/can-html-checkboxes-be-set-to-readonly

[Mahara Bot (dev-mahara)]

Reviewed: https://reviews.mahara.org/2587
Committed: http://gitorious.org/mahara/mahara/commit/ee2be8da8dcb71a3841b3e465e6b2ee2e4514148
Submitter: Robert Lyon (<email address hidden>)
Branch: master

commit ee2be8da8dcb71a3841b3e465e6b2ee2e4514148
Author: Son Nguyen <email address hidden>
Date: Wed Oct 9 10:40:46 2013 +1300

Mark a readonly pieform element as "disabled" (Bug #1237095)

- make sure the value of readonly pieform unchanged

Change-Id: I917b7c8fa4d84234001fdd0cabec141b68a42c77
Signed-off-by: Son Nguyen <email address hidden>

[Aaron Wells (u-aaronw)]

This one was release as part of 1.8.0