Merge branch '126-kein-zugriff-auch-privates-quiz' into 'master'

Resolve "kein Zugriff auch privates Quiz"

Closes #126

See merge request enrichment-2024/qivip!84
This commit is contained in:
ben8
2025-06-01 13:54:39 +00:00

View File

@@ -260,7 +260,6 @@ def delete_quiz(request, pk):
# Quiz anzeigen # Quiz anzeigen
def detail_quiz(request, pk): def detail_quiz(request, pk):
#quiz = get_object_or_404(QivipQuiz, pk=pk, user_id=request.user)
quiz = get_object_or_404(QivipQuiz, pk=pk) quiz = get_object_or_404(QivipQuiz, pk=pk)
show_answers = request.GET.get('show_answers', 'false').lower() == 'true' show_answers = request.GET.get('show_answers', 'false').lower() == 'true'
questions = QivipQuestion.objects.filter(quiz_id=quiz) questions = QivipQuestion.objects.filter(quiz_id=quiz)
@@ -274,7 +273,11 @@ def detail_quiz(request, pk):
'questions': questions, 'questions': questions,
'detail':show_answers, 'detail':show_answers,
} }
return render(request, 'library/detail_quiz.html', context) if quiz.status!="privat" or quiz.user_id==request.user:
return render(request, 'library/detail_quiz.html', context)
else:
return redirect('library:overview_quiz')
@login_required @login_required