fix
This commit is contained in:
parent
c2b1e67be5
commit
a35ec4b91d
@ -45,7 +45,7 @@ class SolutionsTableView(BaseView):
|
||||
if self.entities.set.creator != self.request.user:
|
||||
raise AccessError()
|
||||
if hasattr(self.entities, "task"):
|
||||
if self.entities.task.creator != self.request.user:
|
||||
if self.entities.task.creator != self.request.user or self.request.user.username in self.entities.task.editors:
|
||||
raise AccessError()
|
||||
|
||||
def get(self):
|
||||
|
Loading…
Reference in New Issue
Block a user