.

rad/urls.py

@@ -56,7 +56,7 @@ urlpatterns = [
     path("accounts/", include("django.contrib.auth.urls")),
     path("accounts/profile", views.profile, name="profile"),
     path("", TemplateView.as_view(template_name="index.html"), name="home"),
-    path("cid/<int:pk>", views.cid_scores, name="cid_scores"),
+    path("cid/<int:pk>/<str:passcode>/?", views.cid_scores, name="cid_scores"),
     path("cid/", views.cid_selector, name="cid_selector"),
     # Global url that registers RTS compatible exams
     path("exam/json/", views.active_exams, name="active_exams"),

rad/views.py

@@ -52,7 +52,7 @@ from rapids.views import RapidExamViews
 from longs.views import LongExamViews
 
 from generic.forms import QuestionNoteForm
-from generic.models import QuestionNote
+from generic.models import CidUser, QuestionNote
 
 import json
 
@@ -76,12 +76,16 @@ def cid_selector(request):
     )
 
 
-def cid_scores(request, pk):
+def cid_scores(request, pk, passcode):
     # exam = get_object_or_404(Exam, pk=pk)
 
-    # TODO:Need some kind of test for cid
     cid = pk
 
+    cid_user = get_object_or_404(CidUser, pk=cid)
+    if cid_user.passcode != passcode:
+        Http404("CID / Passcode combination not found")
+
+
     # questions = exam.exam_questions.all()
     physics_answers = PhysicsCidUserAnswer.objects.filter(cid=cid)
     anatomy_answers = AnatomyCidUserAnswer.objects.filter(cid=cid)