1.修护课程作业编辑页面,没权限通过url访问时报错的BUG

2.修复用户可通过url访问课程配置页面的BUG
This commit is contained in:
sw 2014-10-08 15:06:29 +08:00
parent ecfcbf1078
commit 43b204e0a7
2 changed files with 10 additions and 5 deletions

View File

@ -832,7 +832,7 @@ class BidsController < ApplicationController
} }
end end
else else
render 403 render_403
end end
end end

View File

@ -216,10 +216,15 @@ class CoursesController < ApplicationController
end end
def settings def settings
if User.current.allowed_to?(:as_teacher,@course)
@issue_custom_fields = IssueCustomField.sorted.all @issue_custom_fields = IssueCustomField.sorted.all
@issue_category ||= IssueCategory.new @issue_category ||= IssueCategory.new
@member ||= @course.members.new @member ||= @course.members.new
@trackers = Tracker.sorted.all @trackers = Tracker.sorted.all
else
render_403
end
end end
def create def create