Changeset 3816

Timestamp:

15 Dec 2008, 06:44:18 (16 years ago)

Author:

Henrik Bettermann

Message:

resolve ticket FUTMinna #18

File:

• WAeUP_SRP/trunk/skins/waeup_epayment/interswitch_cb.py (modified) (1 diff)

WAeUP_SRP/trunk/skins/waeup_epayment/interswitch_cb.py

@@ -34 +34 @@
 access_info = context.waeup_tool.getAccessInfo(context)
 student_id = access_info['student_id']
-if student_id is None: # or student_id != member_id:
+if not context.isSectionOfficer() and (student_id is None or student_id != member_id):
     logger.info('%s tried to access payment object of %s' % (member_id,student_id))
     referer = request.get('HTTP_REFERER','none')