From 0ae709972a41684cb4d0075ff2885d850dbfe0f8 Mon Sep 17 00:00:00 2001 From: xdrm-brackets Date: Thu, 26 Nov 2015 21:54:01 +0100 Subject: [PATCH] =?UTF-8?q?Correction=20des=20droits=20pour=20d=C3=A9finir?= =?UTF-8?q?=20l'action=20des=20liens=20vers=20le=20dossier=20=C3=A9tu?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- manager/career.php | 2 +- page/_JS/career.js | 3 ++- page/_JS/groups.js | 18 ++++++++++++++++++ page/career.php | 8 ++++---- page/home.php | 2 +- 5 files changed, 26 insertions(+), 7 deletions(-) diff --git a/manager/career.php b/manager/career.php index ee123bf..5f76b80 100755 --- a/manager/career.php +++ b/manager/career.php @@ -186,7 +186,7 @@ require_once __ROOT__.'/manager/database.php'; /**********************************************/ /* informations relatives au dossier étudiant */ /**********************************************/ - case 'studentcase': if( permission('teacher') ){ + case 'studentcase': if( permission('teacher') || permission('master') || permission('admin') ){ $areSetParam = isset($request->etudiant) && isset($request->controle) && isset($request->note); // les arguments existent $typeOkParam = $areSetParam && is_string($request->etudiant); // si c'est des strings diff --git a/page/_JS/career.js b/page/_JS/career.js index 209699d..881d88f 100755 --- a/page/_JS/career.js +++ b/page/_JS/career.js @@ -55,6 +55,7 @@ for( var i = 0 ; i < partList.length ; i++ ){ /**************************************************/ /* GESTION DU FILTRAGE POUR LES ENSEIGNANTS/ADMIN */ /**************************************************/ +var canSeeStudent = document.querySelector('#CONTAINER > section[name=allcontroles]') != null; if( document.querySelectorAll('#CONTAINER section[data-controles]').length > 0 ){ // on traite uniquement si la section est définie allControleSections = document.querySelectorAll('#CONTAINER section[data-controles]'); @@ -88,7 +89,7 @@ if( document.querySelectorAll('#CONTAINER section[data-controles]').length > 0 ) } /* LIENS POUR LES DOSSIER ETUDIANT */ - if( e.target.className == 'link etu' && e.target.dataset.hasOwnProperty('etu') ){ + if( canSeeStudent && e.target.className == 'link etu' && e.target.dataset.hasOwnProperty('etu') ){ pageM.vars[1] = 'e:'+e.target.dataset.etu; if( pageM.vars[2] != null ) diff --git a/page/_JS/groups.js b/page/_JS/groups.js index 1544a84..8a40682 100755 --- a/page/_JS/groups.js +++ b/page/_JS/groups.js @@ -1,6 +1,24 @@