easy changing to athlete's workouts list for coaches

rowers/views.py

@@ -735,7 +735,7 @@ from utils import (
 
 import datautils
 
-from rowers.models import checkworkoutuser
+from rowers.models import checkworkoutuser,checkaccessuser
 
 # Check if a user is a Coach member
 def iscoachmember(user):
@@ -6025,18 +6025,31 @@ def workouts_view(request,message='',successmessage='',
                   startdatestring="",enddatestring="",
                   startdate=timezone.now()-datetime.timedelta(days=365),
                   enddate=timezone.now()+datetime.timedelta(days=1),
-                  teamid=0,rankingonly=False):
+                  teamid=0,rankingonly=False,rowerid=0,userid=0):
     request.session['referer'] = absolute(request)['PATH']
     try:
-	r = getrower(request.user)
+        if rowerid != 0:
+            r = Rower.objects.get(id=rowerid)
+        elif userid != 0:
+            u = User.objects.get(id=userid)
+            r = getrower(u)
+        else:
+	    r = getrower(request.user)
+            
     except Rower.DoesNotExist:
         raise Http404("Rower doesn't exist")
 
+    # check if access is allowed
+    if not checkaccessuser(request.user,r):
+        raise Http404("You are not allowed access to these data")
+
     if request.method == 'POST':
         dateform = DateRangeForm(request.POST)
         if dateform.is_valid():
             startdate = dateform.cleaned_data['startdate']
             enddate = dateform.cleaned_data['enddate']
+            startdatestring = None
+            enddatestring = None
     else:
         dateform = DateRangeForm(initial={
             'startdate':startdate,