From 29d21f48f1392cd00ddef6a3be3531c58b2a8770 Mon Sep 17 00:00:00 2001
From: 
Date: Thu, 25 May 2017 13:09:12 +0530
Subject: Add check for verifying moderator

---
 yaksh/views.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'yaksh')

diff --git a/yaksh/views.py b/yaksh/views.py
index eb7a103..5c52fa7 100644
--- a/yaksh/views.py
+++ b/yaksh/views.py
@@ -1070,7 +1070,6 @@ def user_data(request, user_id, questionpaper_id=None):
     return my_render_to_response('yaksh/user_data.html', context,
                                  context_instance=RequestContext(request))
 
-
 @login_required
 @email_verified
 def download_csv(request, questionpaper_id):
@@ -1545,6 +1544,8 @@ def update_email(request):
 @email_verified
 def download_assignment_file(request, quiz_id, question_id=None, user_id=None):
     user = request.user
+    if not is_moderator(user):
+        raise Http404("You are not allowed to view this page")
     qp = QuestionPaper.objects.get(quiz_id=quiz_id)
     assignment_files, file_name = AssignmentUpload.objects.get_assignments(qp,
                                     question_id,
-- 
cgit