.
This commit is contained in:
+6
-6
@@ -292,11 +292,11 @@ class ExamViews(View, LoginRequiredMixin):
|
||||
exam = get_object_or_404(self.Exam, pk=pk)
|
||||
|
||||
if request.user not in exam.author.all():
|
||||
if self.app_name == "rapids" and request.user.groups.filter(name='rapid_checker').exists():
|
||||
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "anatomy" and request.user.groups.filter(name='anatomy_checker').exists():
|
||||
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
|
||||
raise PermissionDenied
|
||||
if self.app_name == "longs" and request.user.groups.filter(name='longs_checker').exists():
|
||||
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
|
||||
raise PermissionDenied
|
||||
|
||||
|
||||
@@ -309,11 +309,11 @@ class ExamViews(View, LoginRequiredMixin):
|
||||
@method_decorator(login_required)
|
||||
def index(self, request):
|
||||
exams = self.Exam.objects.filter(author__id=request.user.id)
|
||||
if self.app_name == "rapids" and not request.user.groups.filter(name='rapid_checker').exists():
|
||||
if self.app_name == "rapids" and request.user.groups.filter(name='rapid_checker').exists():
|
||||
exams = self.Exam.objects.all()
|
||||
if self.app_name == "anatomy" and not request.user.groups.filter(name='anatomy_checker').exists():
|
||||
if self.app_name == "anatomy" and request.user.groups.filter(name='anatomy_checker').exists():
|
||||
exams = self.Exam.objects.all()
|
||||
if self.app_name == "longs" and not request.user.groups.filter(name='longs_checker').exists():
|
||||
if self.app_name == "longs" and request.user.groups.filter(name='longs_checker').exists():
|
||||
exams = self.Exam.objects.all()
|
||||
|
||||
return render(request, "{}/index.html".format(self.app_name), {"exams": exams})
|
||||
|
||||
Reference in New Issue
Block a user