Changeset 3786 for WAeUP_SRP/trunk/skins/waeup_student

Timestamp:

25 Nov 2008, 20:19:24 (16 years ago)

Author:

Henrik Bettermann

Message:

more beds for futminna

moree security for course_result_list

Location:

WAeUP_SRP/trunk/skins/waeup_student

Files:

• course_result_list.py (modified) (1 diff)
• lecturer_course_edit.py (modified) (1 diff)

WAeUP_SRP/trunk/skins/waeup_student/course_result_list.py

@@ -14 +14 @@
 request = context.REQUEST
 setheader = request.RESPONSE.setHeader
+
+mtool = context.portal_membership
+if mtool.isAnonymousUser():
+    return request.RESPONSE.redirect("%s/srp_anonymous_view" % context.portal_url())
+member = mtool.getAuthenticatedMember()
+member_id = str(member)
+students_folder = context.portal_url.getPortalObject().campus.students
+
+if not students_folder.isSectionOfficer():
+    logger.info('%s tried to access %s' % (member_id,requested_id))
+    return 'Not allowed'
+
+
+
 cr = context.course_results
 scat = context.students_catalog

WAeUP_SRP/trunk/skins/waeup_student/lecturer_course_edit.py

@@ -77 +77 @@
         data['key'] = object['key']
         context.course_results.modifyRecord(**data)
-        logger.info('%s edited course result data %s' % (student_id, course_id))
+        logger.info('%s edited course result %s of %s' % (member_id,course_id,student_id))
         psm = 'psm_content_changed'
         break