moved 'remove all' button to right hand side of page and hidden this … (

#1310)

* moved 'remove all' button to right hand side of page and hidden this button from non-superusers

* ran black linter

* removed commented div tags

workbaskets/jinja2/workbaskets/changes.jinja

@@ -98,9 +98,15 @@
             }) }}
         {% endif %}
 
-        <div class="govuk-button-group">
+        <div class="govuk-grid-row">
+        <div class="govuk-grid-column-one-third">
           <button value="remove-selected" name="form-action" class="govuk-button govuk-button--secondary" data-module="govuk-button">Remove</button>
-          <button value="remove-all" name="form-action" class="govuk-button govuk-button--warning" data-module="govuk-button">Remove all workbasket changes</button>
+        </div>
+          {% if request.user.is_superuser %}
+          <div class="govuk-grid-column-two-thirds govuk-!-margin-bottom-4"> 
+          <button value="remove-all" name="form-action" class="govuk-button govuk-button--warning" data-module="govuk-button" style="float: right;">Remove all workbasket changes</button>
+          </div>
+          {% endif %}
         </div>
 
         {% include "includes/common/pagination.jinja" %}

workbaskets/tests/test_views.py

@@ -2605,3 +2605,37 @@ def test_current_tasks_is_called(valid_user_client):
         assert len(queued_checks) == 2
         assert "QUEUED" in queued_checks[0].get_text()
         assert "QUEUED" in queued_checks[1].get_text()
+
+
+def test_remove_all_workbasket_changes_button_only_shown_to_superusers(
+    client, user_workbasket, superuser
+):
+    url = reverse(
+        "workbaskets:workbasket-ui-changes",
+        kwargs={"pk": user_workbasket.pk},
+    )
+
+    client.force_login(superuser)
+
+    response = client.get(url)
+    assert response.status_code == 200
+    page = BeautifulSoup(str(response.content), "html.parser")
+
+    remove_all_button = page.find("button", value="remove-all")
+    assert remove_all_button
+
+
+def test_remove_all_workbasket_changes_button_not_shown_to_users_without_permision(
+    valid_user_client, user_workbasket
+):
+    url = reverse(
+        "workbaskets:workbasket-ui-changes",
+        kwargs={"pk": user_workbasket.pk},
+    )
+
+    response = valid_user_client.get(url)
+    assert response.status_code == 200
+    page = BeautifulSoup(str(response.content), "html.parser")
+
+    remove_all_button = page.find("button", value="remove-all")
+    assert not remove_all_button