This commit is contained in:
Ross
2021-04-29 19:53:02 +01:00
parent 5381f03053
commit a6627e3031
+6 -3
View File
@@ -217,13 +217,16 @@ class ExamViews(View, LoginRequiredMixin):
#print("test", Exam.objects.all().get(id=pk))
exam = get_object_or_404(self.Exam, pk=pk)
if request.user not in exam.author.all():
if self.app_name == "longs":
if request.user not in exam.get_author_objects:
if not request.user.groups.filter(name='long_checker').exists():
raise PermissionDenied
elif request.user not in exam.author.all():
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
raise PermissionDenied
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
raise PermissionDenied
if self.app_name == "longs" and not request.user.groups.filter(name='long_checker').exists():
raise PermissionDenied
questions = exam.exam_questions.all()