~azzar1/unity/add-show-desktop-key

« back to all changes in this revision

Viewing changes to ivle/webapp/base/rest.py

  • Committer: Matt Giuca
  • Date: 2010-02-12 04:19:45 UTC
  • Revision ID: matt.giuca@gmail.com-20100212041945-a79duog1jp1mbfnh
Added two new configuration options under [policy], for deciding whether tutors can enrol students and edit worksheets. The permissions set in database.py reflects these config options. Documented. This entirely fixes Launchpad Bug #520232 and Bug #493945, regarding tutors having too much power.

Show diffs side-by-side

added added

removed removed

Lines of Context:
55
55
        if not hasattr(op, '_rest_api_permission'):
56
56
            raise Unauthorized()
57
57
 
58
 
        if op._rest_api_permission not in self.get_permissions(req.user):
 
58
        if (op._rest_api_permission not in
 
59
            self.get_permissions(req.user, req.config)):
59
60
            raise Unauthorized()
60
61
    
61
62
    def convert_bool(self, value):