stack/erp5: backport a Products.BTreeFolder2 fix for "Delete All Objects"

component/egg-patch/Products.BTreeFolder2/0001-Add-a-confirmation-prompt-on-Delete-All-Objects-butt.patch

+From cfdd177131b8f453c024ad3008da4951aab16a50 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?J=C3=A9rome=20Perrin?= <jerome@nexedi.com>
+Date: Tue, 2 May 2023 13:53:46 +0900
+Subject: [PATCH] Add a confirmation prompt on ``Delete All Objects`` button
+ (#19)
+
+Co-authored-by: Michael Howitz <icemac@gmx.net>
+
+patch amended to remove the changelog entry
+
+---
+ src/Products/BTreeFolder2/contents.dtml | 2 +-
+ 2 files changed, 4 insertions(+), 1 deletion(-)
+
+diff --git a/src/Products/BTreeFolder2/contents.dtml b/src/Products/BTreeFolder2/contents.dtml
+index d00e04a..9629700 100644
+--- a/src/Products/BTreeFolder2/contents.dtml
++++ b/src/Products/BTreeFolder2/contents.dtml
+@@ -82,7 +82,7 @@ function toggleSelect() {
+   <input class="form-element" type="submit" name="manage_delObjects:method"
+    value="Delete" />
+   <input class="form-element" type="submit" name="manage_delAllObjects:method"
+-   value="Delete All Objects" />
++   value="Delete All Objects" onClick="return confirm('Really delete all objects?')"/>
+   </dtml-if>
+   <dtml-if "_.SecurityCheckPermission('Import/Export objects', this())">
+   <input class="form-element" type="submit"
+-- 
+2.39.1
+

stack/erp5/buildout.cfg

@@ -690,10 +690,12 @@ extra-paths =
 patch-binary = ${patch:location}/bin/patch
 Acquisition-patches = ${:_profile_base_location_}/../../component/egg-patch/Acquisition/aq_dynamic-4.7.patch#85b0090e216cead0fc86c5c274450d96
 Acquisition-patch-options = -p1
-Products.DCWorkflow-patches = ${:_profile_base_location_}/../../component/egg-patch/Products.DCWorkflow/workflow_method-2.4.1.patch#ec7bb56a9f1d37fcbf960cd1e96e6e6d
-Products.DCWorkflow-patch-options = -p1
+Products.BTreeFolder2-patches = ${:_profile_base_location_}/../../component/egg-patch/Products.BTreeFolder2/0001-Add-a-confirmation-prompt-on-Delete-All-Objects-butt.patch#44de3abf382e287b8766c2f29ec1cf74
+Products.BTreeFolder2-patch-options = -p1
 Products.CMFCore-patches = ${:_profile_base_location_}/../../component/egg-patch/Products.CMFCore/portal_skins_ZMI_find.patch#19ec05c0477c50927ee1df6eb75d1e7f
 Products.CMFCore-patch-options = -p1
+Products.DCWorkflow-patches = ${:_profile_base_location_}/../../component/egg-patch/Products.DCWorkflow/workflow_method-2.4.1.patch#ec7bb56a9f1d37fcbf960cd1e96e6e6d
+Products.DCWorkflow-patch-options = -p1
 PyPDF2-patches = ${:_profile_base_location_}/../../component/egg-patch/PyPDF2/0001-Custom-implementation-of-warnings.formatwarning-remo.patch#d25bb0f5dde7f3337a0a50c2f986f5c8
 PyPDF2-patch-options = -p1
 python-magic-patches = ${:_profile_base_location_}/../../component/egg-patch/python_magic/magic.patch#de0839bffac17801e39b60873a6c2068
@@ -801,6 +803,7 @@ parso = 0.5.1
 Pillow = 6.2.2
 polib = 1.0.8
 pprofile = 2.0.4
+Products.BTreeFolder2 = 4.4+SlapOSPatched001
 Products.CMFCore = 2.7.0+SlapOSPatched001
 Products.ExternalMethod = 4.7
 Products.GenericSetup = 2.3.0

[Jérome Perrin]

@yusei I had backported this patch already, but I could not find the time to test it and push it

[Yusei Tahara]

I did not notice that we had patches in slapos. I am really worry about this functionality, it is too dangerous. What about to override manage_delAllObjects and completely disable this function. At least I will make such a patch for all my projects.