This commit is contained in:
Egor Matveev 2022-02-11 22:48:23 +03:00
parent 8e94f38b64
commit 2be16e9db6

View File

@ -36,7 +36,7 @@ class SolutionsTableView(BaseView):
if "username" in self.request.GET and self.request.user.username == self.request.GET['username']:
return
if hasattr(self.entities, "set"):
if self.entities.set.creator != self.request.user and self.request.user.username not in self.entities.editors:
if self.entities.set.creator != self.request.user and self.request.user.username not in self.entities.set.editors:
raise AccessError()
if hasattr(self.entities, "task"):
if self.entities.task.creator != self.request.user and self.request.user.username not in self.entities.task.editors: