Fixed access check for Student Manage/Resign page.
--- a/app/soc/views/models/student.py Mon Aug 03 17:05:55 2009 +0200
+++ b/app/soc/views/models/student.py Mon Aug 03 17:32:34 2009 +0200
@@ -68,8 +68,8 @@
('checkIsActivePeriod', ['student_signup', 'scope_path']),
'checkIsNotParticipatingInProgramInScope',
]
- rights['manage'] = [
- ('checkIsAllowedToManageRole', [soc.logic.models.host.logic])]
+ rights['manage'] = [('checkHasActiveRoleForScope', student_logic.logic),
+ ('checkIsMyEntity', [student_logic.logic, 'user', True])]
rights['list_projects'] = [
('checkHasActiveRoleForScope', student_logic.logic),
('checkIsAfterEvent', ['accepted_students_announced_deadline',