ross/penracourses
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Restrict exam visibility in generic_exam_htmx based on user permissions

Browse Source
This commit is contained in:
Ross
2025-10-20 21:18:46 +01:00
parent 5b8896e2b2
commit ae644f9c03
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
generic/views.py
+11 -1
View File
@@ -585,7 +585,17 @@ def generic_exam_htmx(request):
except Exception: except Exception:
return HttpResponse("Unknown type", status=400) return HttpResponse("Unknown type", status=400)
exams = Exam.objects.filter(archive=False).order_by("name") # For non-superusers, only show exams they can edit or that they authored
if request.user.is_superuser:
exams = Exam.objects.filter(archive=False, exam_mode=True).order_by("name")
else:
# authors or markers or assigned exams
exams = (
Exam.objects.filter(author__id=request.user.id)
| Exam.objects.filter(markers__id=request.user.id)
)
exams = exams.filter(archive=False).order_by("name")
return render(request, "generic/partials/exam_select_fragment.html", {"exams": exams, "type": question_type}) return render(request, "generic/partials/exam_select_fragment.html", {"exams": exams, "type": question_type})
if request.method == "POST": if request.method == "POST":