Changeset 15974 for main/kofacustom.nigeria/trunk/src/kofacustom/nigeria/remita

Timestamp:

31 Jan 2020, 21:50:08 (5 years ago)

Author:

Henrik Bettermann

Message:

Do not allow to submit forms to other companies than payment.r_company.

Location:

main/kofacustom.nigeria/trunk/src/kofacustom/nigeria/remita

Files:

• applicantsbrowser.py (modified) (3 diffs)
• studentsbrowser.py (modified) (3 diffs)

main/kofacustom.nigeria/trunk/src/kofacustom/nigeria/remita/applicantsbrowser.py

@@ -112 +112 @@
         if not module_activated(
             self.context.__parent__.__parent__.year, self.context):
+            self.flash(_('Forbidden'), type='danger')
+            self.redirect(self.url(self.context, '@@index'))
             return
         if self.context.p_state in ('paid', 'waived', 'scholarship'):
@@ -165 +167 @@
         if not module_activated(
             self.context.__parent__.__parent__.year, self.context):
+            self.flash(_('Forbidden'), type='danger')
+            self.redirect(self.url(self.context, '@@index'))
             return
         if self.context.p_state  != 'paid' \
@@ -279 +283 @@
         if not module_activated(
             self.context.__parent__.__parent__.year, self.context):
+            self.flash(_('Forbidden'), type='danger')
+            self.redirect(self.url(self.context, '@@index'))
             return
         self.orderId = self.context.p_id

main/kofacustom.nigeria/trunk/src/kofacustom/nigeria/remita/studentsbrowser.py

@@ -122 +122 @@
         if not module_activated(
             self.context.student.current_session, self.context):
+            self.flash(_('Forbidden'), type='danger')
+            self.redirect(self.url(self.context, '@@index'))
             return
         if self.context.p_state in ('paid', 'waived', 'scholarship'):
@@ -175 +177 @@
         if not module_activated(
             self.context.student.current_session, self.context):
+            self.flash(_('Forbidden'), type='danger')
+            self.redirect(self.url(self.context, '@@index'))
             return
         if self.context.p_state  != 'paid' \
@@ -298 +302 @@
         if not module_activated(
             self.context.student.current_session, self.context):
+            self.flash(_('Forbidden'), type='danger')
+            self.redirect(self.url(self.context, '@@index'))
             return
         self.orderId = self.context.p_id