BrowserSecurity
/
DVGM
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't allow submissions for other students.

This commit is contained in:
Michael Herzberg 2019-02-22 20:44:02 +00:00
parent dd98c265b6
commit 7f16a74d8c
2 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/controllers/grades_controller.rb
View File

@ -49,7 +49,9 @@ class GradesController < ApplicationController
render :new_lecturer
end
elsif logged_in_as_student
@grade = Grade.new(params.require(:grade).permit(:student_id, :lecture_id, :submission))
grade_params = params.require(:grade).permit(:lecture_id, :submission)
grade_params[:student_id] = current_user.id
@grade = Grade.new(grade_params)
if @grade.save
flash[:success] = "Report submitted!"
redirect_to grades_path

4
app/views/grades/new_student.html.erb
View File

@ -4,10 +4,6 @@
<div class="w3-col" style="width: 100px"><%= f.label :lecture %></div>
<div class="w3-rest"><%= f.select(:lecture_id, Lecture.all.collect {|p| [ p.name, p.id ] }) %></div>
</div>
<div class="w3-row w3-section">
<div class="w3-col" style="width: 100px"><%= f.label :student %></div>
<div class="w3-rest"><%= f.select(:student_id, User.where(role: "student").collect {|p| [ p.login, p.id ] }) %></div>
</div>
<div class="w3-row w3-section">
<div class="w3-col" style="width: 100px"><%= f.label :submission %></div>
<div class="w3-rest">