Changeset 3786 for WAeUP_SRP/trunk/skins/waeup_student/course_result_list.py

Timestamp:

25 Nov 2008, 20:19:24 (16 years ago)

Author:

Henrik Bettermann

Message:

more beds for futminna

moree security for course_result_list

File:

• WAeUP_SRP/trunk/skins/waeup_student/course_result_list.py (modified) (1 diff)

WAeUP_SRP/trunk/skins/waeup_student/course_result_list.py

@@ -14 +14 @@
 request = context.REQUEST
 setheader = request.RESPONSE.setHeader
+
+mtool = context.portal_membership
+if mtool.isAnonymousUser():
+    return request.RESPONSE.redirect("%s/srp_anonymous_view" % context.portal_url())
+member = mtool.getAuthenticatedMember()
+member_id = str(member)
+students_folder = context.portal_url.getPortalObject().campus.students
+
+if not students_folder.isSectionOfficer():
+    logger.info('%s tried to access %s' % (member_id,requested_id))
+    return 'Not allowed'
+
+
+
 cr = context.course_results
 scat = context.students_catalog