Allow access to user statistics for teachers

Fixes CODEOCEAN-BV
This commit is contained in:
Sebastian Serth
2022-08-25 18:14:10 +02:00
parent b3f9a1ec90
commit bdebcf319e

View File

@ -45,7 +45,7 @@ class ExternalUsersController < ApplicationController
FROM submissions
WHERE #{ExternalUser.sanitize_sql(['user_id = ?', @user.id])}
AND user_type = 'ExternalUser'
#{current_user.admin? ? '' : "AND #{ExternalUser.sanitize_sql(['study_group_id IN (?)', current_user.study_groups.pluck(:id).join(', ')])} AND cause = 'submit'"}
#{current_user.admin? ? '' : "AND #{ExternalUser.sanitize_sql(['study_group_id IN (?)', current_user.study_groups.pluck(:id)])} AND cause = 'submit'"}
GROUP BY exercise_id,
user_id,
id