sander/rowsandall
Private
Public Access
1
0
Fork 0
Code Activity

persmission on team members session

Browse Source
This commit is contained in:
Sander Roosendaal
2018-02-23 13:26:44 +01:00
parent 353b93dc22
commit 5c55b4977c
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
rowers/views.py
View File

@@ -12638,8 +12638,15 @@ def plannedsession_view(request,id=0,rowerid=0,
coursescript = ''
coursediv = ''
if ps.manager != request.user and r not in ps.rower.all():
raise PermissionDenied("You do not have access to this session")
if ps.manager != request.user:
if r.rowerplan == 'coach':
teams = Team.objects.filter(manager=request.user)
members = Rower.objects.filter(team__in=teams).distinct()
teamusers = [m.user for m in members]
if ps.manager not in teamusers:
raise PermissionDenied("You do not have access to this session")
elif r not in ps.rower.all():
raise PermissionDenied("You do not have access to this session")
resultsdict = get_session_metrics(ps)
resultsdict = pd.DataFrame(resultsdict).transpose().to_dict()