better protection of private workouts

2018-10-29 11:08:49 +01:00
parent a10cba74f6
commit 0a469e81fe
3 changed files with 55 additions and 33 deletions
--- a/rowers/models.py
+++ b/rowers/models.py
@@ -837,7 +837,7 @@ def checkworkoutuser(user,workout):
            return True
        elif teams:
            for team in teams:
-                if user == team.manager:
+                if user == team.manager and workout.privacy == 'visible':
                    return True
        else:
            return False