From 8ee64d52ae920e39c2f5b132c661bc6c7c8f64e0 Mon Sep 17 00:00:00 2001 From: Livio Bieri Date: Tue, 5 Mar 2024 14:36:14 +0100 Subject: [PATCH] fix: test case for principle_user accessing target_user --- server/vbv_lernwelt/self_evaluation_feedback/tests/test_api.py | 2 ++ server/vbv_lernwelt/self_evaluation_feedback/views.py | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/server/vbv_lernwelt/self_evaluation_feedback/tests/test_api.py b/server/vbv_lernwelt/self_evaluation_feedback/tests/test_api.py index 5c9772d3..721d8fb3 100644 --- a/server/vbv_lernwelt/self_evaluation_feedback/tests/test_api.py +++ b/server/vbv_lernwelt/self_evaluation_feedback/tests/test_api.py @@ -436,6 +436,8 @@ class SelfEvaluationFeedbackAPI(APITestCase): # WHEN / THEN test_cases = [ + # principle_user wants to access target_user + # -> expected_status_code (self.member, self.member, 200), (self.mentor, self.member, 200), (expert, self.member, 200), diff --git a/server/vbv_lernwelt/self_evaluation_feedback/views.py b/server/vbv_lernwelt/self_evaluation_feedback/views.py index 5deea687..7d99cdb5 100644 --- a/server/vbv_lernwelt/self_evaluation_feedback/views.py +++ b/server/vbv_lernwelt/self_evaluation_feedback/views.py @@ -99,7 +99,7 @@ def get_course_session_user_feedback_summaries( user_to_lookup = get_object_or_404(User, id=user_id) if not can_view_course_completions( - user=get_object_or_404(User, id=user_id), + user=request.user, # noqa course_session_id=course_session_id, target_user_id=user_id, ):