search

YCHANGE-PROJECT / YCHANGE

0 stars 1 forks source link

Students should not be able to publish projects #42

Closed pjotrsavitski closed 6 years ago

pjotrsavitski commented 6 years ago

Make sure that only admin, teacher or group owner could have the publishing rights to the project.

pjotrsavitski commented 6 years ago

Misread the code, for some reason. The permission checks the editing ability on the object itself first and then applies an additional check for user being an administrator or a teacher.

This means that only administrators or teachers that have either created the Student Project (highly unlikely) or are the owners of the corresponding group can publish/unpublish.