From 0b7c08ba6bacca1b4d802b14bf364ad7de676694 Mon Sep 17 00:00:00 2001
From: Tobias Huttinger <tbh@breadcrumb-solutions.de>
Date: Mon, 22 Jun 2026 13:31:55 +0200
Subject: [PATCH] Added a confirmation dialog for security check danger zone

---
 modules/security/i18n/default_de.json                |  1 +
 modules/security/i18n/default_en.json                |  1 +
 .../pages/security/checks/edit(default).phtml        | 12 +++++++-----
 3 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/modules/security/i18n/default_de.json b/modules/security/i18n/default_de.json
index 73e8bc6..20d0abe 100644
--- a/modules/security/i18n/default_de.json
+++ b/modules/security/i18n/default_de.json
@@ -55,6 +55,7 @@
   "Reopen check": "Check wieder öffnen",
   "Delete check": "Check löschen",
   "Delete this security check? This cannot be undone.": "Diesen Security Check löschen? Dies kann nicht rückgängig gemacht werden.",
+  "Archive this security check? It will become read-only.": "Diesen Security Check archivieren? Er wird schreibgeschützt.",
   "This security check is archived and read-only.": "Dieser Security Check ist archiviert und schreibgeschützt.",
   "This product has no technical checklist items defined yet.": "Für dieses Produkt sind noch keine technischen Checklisten-Punkte definiert.",
   "%d of %d completed": "%d von %d erledigt",
diff --git a/modules/security/i18n/default_en.json b/modules/security/i18n/default_en.json
index a26a072..766548b 100644
--- a/modules/security/i18n/default_en.json
+++ b/modules/security/i18n/default_en.json
@@ -55,6 +55,7 @@
   "Reopen check": "Reopen check",
   "Delete check": "Delete check",
   "Delete this security check? This cannot be undone.": "Delete this security check? This cannot be undone.",
+  "Archive this security check? It will become read-only.": "Archive this security check? It will become read-only.",
   "This security check is archived and read-only.": "This security check is archived and read-only.",
   "This product has no technical checklist items defined yet.": "This product has no technical checklist items defined yet.",
   "%d of %d completed": "%d of %d completed",
diff --git a/modules/security/pages/security/checks/edit(default).phtml b/modules/security/pages/security/checks/edit(default).phtml
index 35b2368..f3ab442 100644
--- a/modules/security/pages/security/checks/edit(default).phtml
+++ b/modules/security/pages/security/checks/edit(default).phtml
@@ -240,14 +240,16 @@ $completionMeta = static function (array $entry) use ($userNames): string {
               <?php if ($status === SecurityCheckProcess::STATUS_ARCHIVED): ?>
                 <button type="submit" name="action" value="unarchive" class="secondary outline small"><i class="bi bi-arrow-counterclockwise"></i> <?php e(t('Reopen check')); ?></button>
               <?php else: ?>
-                <button type="submit" name="action" value="archive" class="secondary outline small"><i class="bi bi-archive"></i> <?php e(t('Archive check')); ?></button>
+                <button type="submit" name="action" value="archive" class="secondary outline small"
+                        data-confirm-message="<?php e(t('Archive this security check? It will become read-only.')); ?>"
+                        data-confirm-variant="warning"><i class="bi bi-archive"></i> <?php e(t('Archive check')); ?></button>
               <?php endif; ?>
             </form>
-            <form method="post"
-                  data-detail-confirm-message="<?php e(t('Delete this security check? This cannot be undone.')); ?>"
-                  data-detail-confirm-variant="danger">
+            <form method="post">
               <?php \MintyPHP\Session::getCsrfInput(); ?>
-              <button type="submit" name="action" value="delete" class="danger outline small"><i class="bi bi-trash3"></i> <?php e(t('Delete check')); ?></button>
+              <button type="submit" name="action" value="delete" class="danger outline small"
+                      data-confirm-message="<?php e(t('Delete this security check? This cannot be undone.')); ?>"
+                      data-confirm-variant="danger"><i class="bi bi-trash3"></i> <?php e(t('Delete check')); ?></button>
             </form>
           </div>
         </div>