.
This commit is contained in:
+30
-8
@@ -198,8 +198,13 @@ class ExamViews(View, LoginRequiredMixin):
|
||||
|
||||
@method_decorator(login_required)
|
||||
def exam_list(self, request):
|
||||
if not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if request.user not in exam.author.all():
|
||||
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
|
||||
raise PermissionDenied
|
||||
exams = self.Exam.objects.all()
|
||||
return render(request, "{}/exam_list.html".format(self.app_name), {"exams": exams})
|
||||
|
||||
@@ -211,8 +216,13 @@ class ExamViews(View, LoginRequiredMixin):
|
||||
#print("test", Exam.objects.all().get(id=pk))
|
||||
exam = get_object_or_404(self.Exam, pk=pk)
|
||||
|
||||
if self.app_name == "rapids" and request.user not in exam.author.all() and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if request.user not in exam.author.all():
|
||||
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
|
||||
raise PermissionDenied
|
||||
|
||||
questions = exam.exam_questions.all()
|
||||
|
||||
@@ -280,8 +290,14 @@ class ExamViews(View, LoginRequiredMixin):
|
||||
def mark_overview(self, request, pk):
|
||||
exam = get_object_or_404(self.Exam, pk=pk)
|
||||
|
||||
if request.user not in exam.author.all() and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if request.user not in exam.author.all():
|
||||
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
|
||||
raise PermissionDenied
|
||||
|
||||
|
||||
questions = exam.exam_questions.all()
|
||||
|
||||
@@ -302,8 +318,14 @@ class ExamViews(View, LoginRequiredMixin):
|
||||
def exam_question_detail(self, request, pk, sk):
|
||||
exam = get_object_or_404(self.Exam, pk=pk)
|
||||
|
||||
if request.user not in exam.author.all() and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if request.user not in exam.author.all():
|
||||
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
|
||||
raise PermissionDenied
|
||||
|
||||
|
||||
question = exam.exam_questions.all()[sk]
|
||||
|
||||
|
||||
Reference in New Issue
Block a user