htwkmooc/codeocean
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Limit access to the study group dashboard to teachers of that group

Browse Source 
Also rename teacher_in_study_group? to add a `?` at the end
This commit is contained in:
Sebastian Serth
2019-05-15 17:41:00 +02:00
parent 652dc7001e
commit 5dd641082e
3 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/policies/exercise_policy.rb
View File

@ -3,10 +3,14 @@ class ExercisePolicy < AdminOrAuthorPolicy
admin?
end
[:show?, :study_group_dashboard?, :feedback?, :requests_for_comments?, :statistics?].each do |action|
[:show?, :feedback?, :requests_for_comments?, :statistics?].each do |action|
define_method(action) { admin? || teacher? }
end
def :study_group_dashboard?
admin? || teacher_in_study_group?
end
[:clone?, :destroy?, :edit?, :update?, :export_external_check?, :export_external_confirm?].each do |action|
define_method(action) { admin? || teacher_in_study_group || author? }
end