This commit is contained in:
Egor Matveev 2021-12-18 12:25:15 +03:00
parent c2b1e67be5
commit a35ec4b91d

View File

@ -45,7 +45,7 @@ class SolutionsTableView(BaseView):
if self.entities.set.creator != self.request.user:
raise AccessError()
if hasattr(self.entities, "task"):
if self.entities.task.creator != self.request.user:
if self.entities.task.creator != self.request.user or self.request.user.username in self.entities.task.editors:
raise AccessError()
def get(self):