Added functionality to exclude student from topic draft.

hpi-schul-cloud · Dec 20, 2023 · 3087741 · 3087741
1 parent 40a7e41
commit 3087741
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/controllers/topics.js b/controllers/topics.js
@@ -372,7 +372,11 @@ router.get('/:topicId', (req, res, next) => {
 		const isCourseTeacher = (course.teacherIds || []).includes(res.locals.currentUser._id);
 		const isCourseSubstitutionTeacher = (course.substitutionIds || []).includes(res.locals.currentUser._id);
 		const isTeacher = isCourseTeacher || isCourseSubstitutionTeacher;
-
+		if (!isTeacher && !isCourseSubstitutionTeacher) {
+			const error = new Error("You don't have permissions!");
+			error.status = 403;
+			return next(error);
+		} else
 		// return for consistent return
 		return res.render('topic/topic', {
 			...lesson,

diff --git a/package-lock.json b/package-lock.json