socialforge/app/controllers/student_work_controller.rb

class StudentWorkController < ApplicationController
  layout "base_courses"
  before_filter :find_homework, :only => [:new, :index, :create]
  before_filter :find_work, :only => [:edit, :update, :show, :destroy]
  before_filter :member_of_course, :only => [:index, :new, :create, :show]
  before_filter :author_of_work, :only => [:edit, :update, :destroy]

  def index
    respond_to do |format|
      format.html
    end
  end

  def new
    respond_to do |format|
      format.html
    end
  end

  def create

  end

  def edit

  end

  def update

  end

  def show

  end

  def destroy

  end

  private
  #获取作业
  def find_homework
    @homework = HomeworkCommon.find params[:homework]
    @course = @homework.course
  rescue
    render_404
  end
  #获取作品
  def find_work
    @work = StudentWork.find params[:id]
    @course = @work.homework_common.course
  rescue
    render_404
  end

  #是不是当前课程的成员
  #当前课程成员才可以看到作品列表
  def member_of_course
    render_403 unless User.current.member_of_course? @course
  end

  #判断是不是当前作品的提交者
  #提交者可以编辑作品
  def author_of_work
    render_403 unless User.current.id == @work.user_id
  end
end