.
This commit is contained in:
+2
-2
@@ -3818,7 +3818,7 @@ class UpdateQuestionMixin(RedirectMixin, RevisionMixin, UpdateView):
|
|||||||
def supervisor_overview(request, pk):
|
def supervisor_overview(request, pk):
|
||||||
supervisor = get_object_or_404(Supervisor, pk=pk)
|
supervisor = get_object_or_404(Supervisor, pk=pk)
|
||||||
|
|
||||||
if not request.user.supervisor == supervisor:
|
if not request.user.supervisor == supervisor and not request.user.is_superuser:
|
||||||
raise PermissionDenied()
|
raise PermissionDenied()
|
||||||
|
|
||||||
trainees = User.objects.filter(userprofile__supervisor=supervisor)
|
trainees = User.objects.filter(userprofile__supervisor=supervisor)
|
||||||
@@ -3833,7 +3833,7 @@ def supervisor_overview(request, pk):
|
|||||||
def supervisor_trainee(request, pk, trainee_id):
|
def supervisor_trainee(request, pk, trainee_id):
|
||||||
supervisor = get_object_or_404(Supervisor, pk=pk)
|
supervisor = get_object_or_404(Supervisor, pk=pk)
|
||||||
|
|
||||||
if not request.user.supervisor == supervisor:
|
if not request.user.supervisor == supervisor and not request.user.is_superuser:
|
||||||
raise PermissionDenied()
|
raise PermissionDenied()
|
||||||
|
|
||||||
# We do this to check that the supervisor can (should) see the trainee results
|
# We do this to check that the supervisor can (should) see the trainee results
|
||||||
|
|||||||
Reference in New Issue
Block a user