half way through planviews, added can_change_session

rowers/rower_rules.py

@@ -243,6 +243,10 @@ rules.add_perm('workout.view_workout',can_view_workout) # replaces checkworkoutu
 # check if user has view access to session
 @rules.predicate
 def can_view_session(user,session):
+    if session.sessiontype in ['race','indoorrace']:
+        return True    
+    if user.is_anonymous:
+        return False
     # session manager can view session
     if user == session.manager:
         return True
@@ -258,7 +262,20 @@ def can_view_session(user,session):
 
     return False
 
+@rules.predicate
+def can_change_session(user,session):
+    if user.is_anonymous:
+        return False
+    # session part of a race should not be changed through the session interface
+    if session.sessiontype in ['race','indoorrace']:
+        return False
+    if user == session.manager:
+        return True
+
+    return False
+
 rules.add_perm('plannedsession.view_session',can_view_session)
+rules.add_perm('plannedsession.change_session',can_change_session)
 
 # checkaccessplanuser (models.py)
 # getrequestrower, getrequestplanrower