Changeset 3236 for WAeUP_SRP/base

Timestamp:

26 Feb 2008, 16:54:44 (17 years ago)

Author:

joachim

Message:

implement getAccessInfo in interswitch_cb totally untested.

File:

• WAeUP_SRP/base/skins/waeup_epayment/interswitch_cb.py (modified) (4 diffs)

WAeUP_SRP/base/skins/waeup_epayment/interswitch_cb.py

@@ -21 +21 @@
 from AccessControl import Unauthorized
 import DateTime
+
 if context.portal_membership.isAnonymousUser():
     return None
@@ -30 +31 @@
 member = mtool.getAuthenticatedMember()
 member_id = str(member)
-student_id = context.getStudentId()
+#student_id = context.getStudentId()
+access_info = context.waeup_tool.getAccessInfo(context)
+student_id = access_info['student_id']
 if student_id is None: # or student_id != member_id:
     logger.info('%s tried to access payment object of %s' % (member_id,student_id))
@@ -72 +75 @@
     #    wftool.doActionFor(context,'close')
     return request.RESPONSE.redirect("%s/waeup_document_view" % context.absolute_url())
-try:
-    context.getContent().edit(mapping = pd)
-except:
-    logger.info('%s tried to edit payment %s in state %s' % (student_id,
-                                                             context.getId(),
-                                                             review_state))
-    return request.RESPONSE.redirect("%s/waeup_document_view" % context.absolute_url())
+if access_info['is_student'] and review_state == 'closed':
+    wftool.doActionFor(context,'open')
+context.getContent().edit(mapping = pd)
+# except:
+#     logger.info('%s tried to edit payment %s in state %s' % (student_id,
+#                                                              context.getId(),
+#                                                              review_state))
+#     return request.RESPONSE.redirect("%s/waeup_document_view" % context.absolute_url())
 
 resp = pd['resp_code']
@@ -122 +126 @@
 else:
     logger.info('%s received unsuccessfull callback: %s' % (student_id,pd['resp_desc']))
-try:
+if review_state == 'opened':
     wftool.doActionFor(context,'close')
-except:
-    logger.info('%s no workflow action close' % student_id)