From fc2d4050a0918ed5486e600960967f9da926bb20 Mon Sep 17 00:00:00 2001
From: Vivek Anand <vivekanand1101@gmail.com>
Date: Feb 15 2017 10:28:57 +0000
Subject: Don't use form for accessing add_user/add_group_project page


Signed-off-by: Vivek Anand <vivekanand1101@gmail.com>

---

diff --git a/pagure/templates/settings.html b/pagure/templates/settings.html
index c25c0c4..5ed2634 100644
--- a/pagure/templates/settings.html
+++ b/pagure/templates/settings.html
@@ -434,19 +434,15 @@
                   </button>
                   {{ form.csrf_token }}
                 </form>
-                <form class="pull-xs-right" method="GET"
-                  action="{{ url_for(
+                  <a href="{{ url_for(
                       '.add_user',
                       repo=repo.name,
                       username=username,
                       namespace=repo.namespace)
-                      }}">
-                  <button
-                    title="Update User Access" class="btn btn-primary btn-sm">
+                      }}"
+                    title="Update User Access" class="btn btn-primary btn-sm pull-xs-right">
                     <span class="oi" data-glyph="pencil"></span>
-                  </button>
-                  {{ form.csrf_token }}
-                </form>
+                  </a>
               </li>
             {% endfor %}
           {% endfor %}
@@ -472,19 +468,15 @@
                   </button>
                   {{ form.csrf_token }}
                 </form>
-                <form class="pull-xs-right" method="GET"
-                  action="{{ url_for(
+                  <a href="{{ url_for(
                       '.add_group_project',
                       repo=repo.name,
                       username=username,
                       namespace=repo.namespace)
-                      }}">
-                  <button
-                    title="Update Group Access" class="btn btn-primary btn-sm">
+                      }}"
+                    title="Update Group Access" class="btn btn-primary btn-sm pull-xs-right">
                     <span class="oi" data-glyph="pencil"></span>
-                  </button>
-                  {{ form.csrf_token }}
-                </form>
+                  </a>
 
               </li>
             {% endfor %}