sander/rowsandall
Private
Public Access
1
0
Fork 0
Code Activity

corrected training plan permissions and form

Browse Source
This commit is contained in:
Sander Roosendaal
2019-05-16 16:02:50 +02:00
parent 3f1c456054
commit 304b2559c7
2 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
rowers/views/planviews.py
View File

@@ -904,7 +904,7 @@ def plannedsessions_coach_view(request,
else:
theteam = False
if request.user.rower.rowerplan == 'coach':
if 'coach' in request.user.rower.rowerplan:
sps = get_sessions_manager(request.user,teamid=teamid,
enddate=enddate,
startdate=startdate)
@@ -914,7 +914,7 @@ def plannedsessions_coach_view(request,
rowers = [therower]
for ps in sps:
if request.user.rower.rowerplan == 'coach':
if 'coach' in request.user.rower.rowerplan:
rowers += ps.rower.all()
else:
rowers += ps.rower.filter(team__in=rteams)
@@ -1569,7 +1569,7 @@ def plannedsession_view(request,id=0,userid=0):
mm = Rower.objects.get(user=m)
if ps.manager != request.user:
if r.rowerplan == 'coach' and r not in ps.rower.all():
if 'coach' in r.rowerplan and r not in ps.rower.all():
teams = Team.objects.filter(manager=request.user)
members = Rower.objects.filter(team__in=teams).distinct()
teamusers = [m.user for m in members]
@@ -1808,6 +1808,10 @@ def rower_create_trainingplan(request,userid=0):
name = targetform.cleaned_data['name']
date = targetform.cleaned_data['date']
notes = targetform.cleaned_data['notes']
try:
rowers = targetform.cleaned_data['rowers']
except KeyError:
rowers = [therower]
t = TrainingTarget(
name=name,
@@ -1817,7 +1821,8 @@ def rower_create_trainingplan(request,userid=0):
t.save()
t.rowers.add(therower)
for athlete in rowers:
t.rowers.add(athlete)
t.save()
elif request.method == 'POST' and 'startdate' in request.POST:
@@ -2589,7 +2594,7 @@ class TrainingPlanUpdate(UpdateView):
obj = super(TrainingPlanUpdate, self).get_object(*args, **kwargs)
if obj.manager is not None and self.request.user.rower != obj.manager:
raise PermissionDenied('You are not allowed to edit this training plan cycle')
if obj.manager.rowerplan not in ['coach','plan']:
if obj.manager.rowerplan not in ['coach','freecoach','plan']:
raise PermissionDenied('You are not allowed to edit this training plan')
return obj