Only show submission form if authorized

This commit is contained in:
Gregor Kleen 2018-07-10 13:47:26 +02:00
parent 03a785abc2
commit a7fb5a7d9e
2 changed files with 8 additions and 4 deletions

View File

@ -246,6 +246,8 @@ submissionHelper tid csh shn (SubmissionMode mcid) = do
Nothing -> return () Nothing -> return ()
actionUrl <- Data.Maybe.fromJust <$> getCurrentRoute actionUrl <- Data.Maybe.fromJust <$> getCurrentRoute
maySubmit <- (== Authorized) <$> isAuthorized actionUrl True
-- Maybe construct a table to display uploaded archive files -- Maybe construct a table to display uploaded archive files
let colonnadeFiles :: _ -> Colonnade Sortable _ (DBCell (WidgetT UniWorX IO) ()) let colonnadeFiles :: _ -> Colonnade Sortable _ (DBCell (WidgetT UniWorX IO) ())
colonnadeFiles cid = mconcat colonnadeFiles cid = mconcat
@ -355,6 +357,7 @@ getSubArchiveR tid csh shn cID@CryptoID{..} (ZIPArchiveName sfType) = do
fileSource' = do fileSource' = do
fileSource .| Conduit.map entityVal fileSource .| Conduit.map entityVal
when (sfType == SubmissionCorrected) $
maybe (return ()) (yieldM . ratingFile cID) rating maybe (return ()) (yieldM . ratingFile cID) rating
zipComment = Text.encodeUtf8 . pack $ CI.foldedCase ciphertext zipComment = Text.encodeUtf8 . pack $ CI.foldedCase ciphertext

View File

@ -12,6 +12,7 @@ $maybe cID <- mcid
<h3>_{MsgSubmissionFiles} <h3>_{MsgSubmissionFiles}
^{fileTable} ^{fileTable}
$if maySubmit
<section> <section>
<form .form-horizontal method=post action=@{actionUrl} enctype=#{formEnctype}> <form .form-horizontal method=post action=@{actionUrl} enctype=#{formEnctype}>
^{formWidget} ^{formWidget}