Disallow external user statistics for teachers

This commit is contained in:
Sebastian Serth
2019-12-02 12:02:34 +01:00
parent 02745c1074
commit deaa522a14

View File

@ -353,6 +353,7 @@ class ExercisesController < ApplicationController
def statistics def statistics
if(@external_user) if(@external_user)
authorize(@external_user, :statistics?)
@submissions = Submission.where("user_id = ? AND exercise_id = ?", @external_user.id, @exercise.id).order("created_at") @submissions = Submission.where("user_id = ? AND exercise_id = ?", @external_user.id, @exercise.id).order("created_at")
interventions = UserExerciseIntervention.where("user_id = ? AND exercise_id = ?", @external_user.id, @exercise.id) interventions = UserExerciseIntervention.where("user_id = ? AND exercise_id = ?", @external_user.id, @exercise.id)
@all_events = (@submissions + interventions).sort_by { |a| a.created_at } @all_events = (@submissions + interventions).sort_by { |a| a.created_at }