Merge branch '126-kein-zugriff-auch-privates-quiz' into 'master'

Resolve "kein Zugriff auch privates Quiz"

Closes #126

See merge request enrichment-2024/qivip!84

django/library/views.py

@@ -260,7 +260,6 @@ def delete_quiz(request, pk):
 
 # Quiz anzeigen
 def detail_quiz(request, pk):
-    #quiz = get_object_or_404(QivipQuiz, pk=pk, user_id=request.user)
     quiz = get_object_or_404(QivipQuiz, pk=pk)
     show_answers = request.GET.get('show_answers', 'false').lower() == 'true'
     questions = QivipQuestion.objects.filter(quiz_id=quiz)
@@ -274,7 +273,11 @@ def detail_quiz(request, pk):
         'questions': questions,
         'detail':show_answers,
     }
+    if quiz.status!="privat" or quiz.user_id==request.user:
         return render(request, 'library/detail_quiz.html', context)
+    else:
+        return redirect('library:overview_quiz')
+
 
 
 @login_required