DMC/scipro
7
0
Fork 0
Code Issues30 Pull Requests3 Actions Projects1 Releases Wiki Activity

Allow supervisors to view opposition reports, not only admins

Browse Source 
Change-Id: Ib089d2b7b784828fdb0ab6559ca02f4cf2b60735
This commit is contained in:
mpeters 2011-07-29 13:54:43 +02:00
parent 0da9284647
commit 169df83554
1 changed files with 3 additions and 2 deletions

5
src/main/java/se/su/dsv/scipro/opponent/panels/FinalSeminarDetailsPanel.java

@ -136,7 +136,8 @@ public class FinalSeminarDetailsPanel extends Panel {
return item.getModelObject().getOpponentReport() != null; return item.getModelObject().getOpponentReport() != null;
} }
}; };
MetaDataActionStrategy.authorize(oppCon, Roles.ADMIN); //Students are not allowed to view other students opposition reports
MetaDataActionStrategy.authorize(oppCon, Roles.EMPLOYEE);
item.add(oppCon); item.add(oppCon);
String reportTitle = ""; String reportTitle = "";
@ -148,7 +149,7 @@ public class FinalSeminarDetailsPanel extends Panel {
oppCon.add(new FileOpenLink("open", item.getModelObject().getOpponentReport())); oppCon.add(new FileOpenLink("open", item.getModelObject().getOpponentReport()));
oppCon.add(new AjaxLink<Void>("deleteOppositionReport"){ oppCon.add(new AjaxLink<Void>("deleteOppositionReport"){
private static final long serialVersionUID = 1L; private static final long serialVersionUID = 1L;
{ //Extra safeguard should someone later decide that the surrounding container should be visible to all {
MetaDataActionStrategy.authorize(this, Roles.ADMIN); MetaDataActionStrategy.authorize(this, Roles.ADMIN);
this.add(new JavascriptEventConfirmation("onclick", "Do you really want to delete this user-uploaded report?")); this.add(new JavascriptEventConfirmation("onclick", "Do you really want to delete this user-uploaded report?"));
} }