Fixed access check for Student Manage/Resign page.
authorLennard de Rijk <ljvderijk@gmail.com>
Mon, 03 Aug 2009 17:32:34 +0200
changeset 2718 a5d70c9e871f
parent 2717 fdde098394a7
child 2719 c8841000b863
Fixed access check for Student Manage/Resign page.
app/soc/views/models/student.py
--- a/app/soc/views/models/student.py	Mon Aug 03 17:05:55 2009 +0200
+++ b/app/soc/views/models/student.py	Mon Aug 03 17:32:34 2009 +0200
@@ -68,8 +68,8 @@
         ('checkIsActivePeriod', ['student_signup', 'scope_path']),
         'checkIsNotParticipatingInProgramInScope',
         ]
-    rights['manage'] = [
-        ('checkIsAllowedToManageRole', [soc.logic.models.host.logic])]
+    rights['manage'] = [('checkHasActiveRoleForScope', student_logic.logic),
+        ('checkIsMyEntity', [student_logic.logic, 'user', True])]
     rights['list_projects'] = [
         ('checkHasActiveRoleForScope', student_logic.logic),
         ('checkIsAfterEvent', ['accepted_students_announced_deadline',