This commit is contained in:
Ross
2021-04-22 20:20:44 +01:00
parent 8fb87bb1b1
commit 101131858b
4 changed files with 57 additions and 9 deletions
+30 -8
View File
@@ -198,8 +198,13 @@ class ExamViews(View, LoginRequiredMixin):
@method_decorator(login_required)
def exam_list(self, request):
if not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if request.user not in exam.author.all():
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
raise PermissionDenied
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
raise PermissionDenied
exams = self.Exam.objects.all()
return render(request, "{}/exam_list.html".format(self.app_name), {"exams": exams})
@@ -211,8 +216,13 @@ class ExamViews(View, LoginRequiredMixin):
#print("test", Exam.objects.all().get(id=pk))
exam = get_object_or_404(self.Exam, pk=pk)
if self.app_name == "rapids" and request.user not in exam.author.all() and not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if request.user not in exam.author.all():
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
raise PermissionDenied
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
raise PermissionDenied
questions = exam.exam_questions.all()
@@ -280,8 +290,14 @@ class ExamViews(View, LoginRequiredMixin):
def mark_overview(self, request, pk):
exam = get_object_or_404(self.Exam, pk=pk)
if request.user not in exam.author.all() and not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if request.user not in exam.author.all():
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
raise PermissionDenied
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
raise PermissionDenied
questions = exam.exam_questions.all()
@@ -302,8 +318,14 @@ class ExamViews(View, LoginRequiredMixin):
def exam_question_detail(self, request, pk, sk):
exam = get_object_or_404(self.Exam, pk=pk)
if request.user not in exam.author.all() and not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if request.user not in exam.author.all():
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
raise PermissionDenied
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
raise PermissionDenied
question = exam.exam_questions.all()[sk]