From 8687472406f8096a79029fd972862e0173a40b15 Mon Sep 17 00:00:00 2001
From: Ross <xkjq@ymail.com>
Date: Thu, 29 Apr 2021 19:37:02 +0100
Subject: [PATCH] .

---
 longs/views.py | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/longs/views.py b/longs/views.py
index 8f7523e7..e2b28e84 100755
--- a/longs/views.py
+++ b/longs/views.py
@@ -90,6 +90,7 @@ class AuthorOrCheckerRequiredMixin(object):
 
 
 @login_required
+@user_is_author_or_long_checker
 def question_detail(request, pk):
     long = get_object_or_404(Long, pk=pk)
 
@@ -101,6 +102,7 @@ def question_detail(request, pk):
     return render(request, "longs/question_detail.html", {"question": long})
 
 @login_required
+@user_is_author_or_long_checker
 def long_series_detail(request, pk):
     series = get_object_or_404(LongSeries, pk=pk)
 
@@ -112,6 +114,7 @@ def long_series_detail(request, pk):
     return render(request, "longs/long_series.html", {"series": series})
 
 @login_required
+@user_is_author_or_long_checker
 def long_split(request, pk):
     long = get_object_or_404(Long, pk=pk)
 
@@ -150,6 +153,7 @@ def long_split(request, pk):
 
 
 @login_required
+@user_is_author_or_long_checker
 def author_detail(request, pk):
     # logging.debug(Author.objects.all())
     # author = get_object_or_404(Author, pk=pk)
@@ -162,6 +166,7 @@ def author_detail(request, pk):
     )
 
 
+@user_is_author_or_long_checker
 def author_list(request):
     authors = User.objects.all()
 
@@ -249,6 +254,7 @@ class LongSeriesDelete(AuthorOrCheckerRequiredMixin, DeleteView):
     success_url = reverse_lazy("longs:long_series_view")
 
 @login_required
+@user_is_author_or_long_checker
 def long_clone(request, pk):
     new_item = get_object_or_404(Long, pk=pk)
     new_item.pk = None  # autogen a new pk (item_id)
@@ -676,6 +682,7 @@ def loadJsonAnswer(answer):
 
 
 @login_required
+@user_is_author_or_long_checker
 def mark_answer(request, pk, sk, tk):
     exam = get_object_or_404(Exam, pk=pk)
 
@@ -744,6 +751,7 @@ def mark_answer(request, pk, sk, tk):
 
 # @user_passes_test(user_is_admin, login_url="/accounts/login")
 @login_required
+@user_is_author_or_long_checker
 def mark(request, pk, sk):
     exam = get_object_or_404(Exam, pk=pk)
 
@@ -777,6 +785,7 @@ def mark(request, pk, sk):
 
 
 @login_required
+@user_is_author_or_long_checker
 def exam_scores_cid(request, pk):
     exam = get_object_or_404(Exam, pk=pk)
 
@@ -946,6 +955,7 @@ def exam_scores_cid_user(request, pk, sk):
     )
 
 @login_required
+@user_is_author_or_long_checker
 def long_series_order_dicom(request, pk):
     series = get_object_or_404(LongSeries, pk=pk)
     try:
@@ -956,6 +966,7 @@ def long_series_order_dicom(request, pk):
     return redirect("longs:long_series_detail", pk=pk)
 
 @login_required
+@user_is_author_or_long_checker
 def long_series_order_dicom_instance(request, pk):
     series = get_object_or_404(LongSeries, pk=pk)
     try:
@@ -966,6 +977,7 @@ def long_series_order_dicom_instance(request, pk):
     return redirect("longs:long_series_detail", pk=pk)
 
 @login_required
+@user_is_author_or_long_checker
 def long_series_order_dicom_SeriesInstanceUID(request, pk):
     series = get_object_or_404(LongSeries, pk=pk)
     try:
@@ -976,6 +988,7 @@ def long_series_order_dicom_SeriesInstanceUID(request, pk):
     return redirect("longs:long_series_detail", pk=pk)
 
 @login_required
+@user_is_author_or_long_checker
 def long_series_order_upload_filename(request, pk):
     series = get_object_or_404(LongSeries, pk=pk)
     series.order_by_upload_filename()
@@ -1018,6 +1031,7 @@ def question_json(request, pk):
     return redirect(question_json)
 
 @login_required
+@user_is_author_or_long_checker
 def question_json_recreate(request, pk):
     question = get_object_or_404(Long, pk=pk)