ross/penracourses
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Restrict ExamCollectionList to authenticated users and filter by current user as author

Browse Source
This commit is contained in:
Ross
2025-12-29 09:41:45 +00:00
parent 0bea34d406
commit 112c96dc00
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
generic/views.py
+7 -2
View File
@@ -5734,7 +5734,7 @@ class SupervisorList(CidManagerRequiredMixin, SingleTableMixin, FilterView):
filterset_class = SupervisorFilter filterset_class = SupervisorFilter
class ExamCollectionList(AuthorRequiredMixin, ListView): class ExamCollectionList(ListView):
model = ExamCollection model = ExamCollection
def get_queryset(self): def get_queryset(self):
@@ -5742,7 +5742,12 @@ class ExamCollectionList(AuthorRequiredMixin, ListView):
# allow toggling whether archived collections are included via ?show_archived=1 # allow toggling whether archived collections are included via ?show_archived=1
show_archived = self.request.GET.get("show_archived") show_archived = self.request.GET.get("show_archived")
base_qs = ExamCollection.objects.all() # If user is anonymous return empty set; otherwise limit to collections
# where the current user is listed as an author.
if not self.request.user.is_authenticated:
return ExamCollection.objects.none()
base_qs = ExamCollection.objects.filter(author=self.request.user)
if not show_archived: if not show_archived:
base_qs = base_qs.filter(archive=False) base_qs = base_qs.filter(archive=False)