--- a/app/soc/views/models/survey.py Wed Aug 05 16:52:08 2009 +0200
+++ b/app/soc/views/models/survey.py Wed Aug 05 22:00:08 2009 +0200
@@ -106,7 +106,10 @@
rights['delete'] = ['checkIsDeveloper'] # TODO: fix deletion of Surveys
rights['list'] = ['checkDocumentList']
rights['pick'] = ['checkDocumentPick']
- rights['record'] = ['checkIsDeveloper'] # TODO: proper access check
+ rights['record'] = [('checkHasAny', [
+ [('checkIsSurveyReadable', [survey_logic]),
+ ('checkIsMySurveyRecord', [survey_logic, 'id'])]
+ ])]
rights['results'] = ['checkIsDeveloper'] # TODO: proper access check
rights['take'] = [('checkIsSurveyTakeable', survey_logic)]