@@ -224,30 +224,33 @@ def edit_uid(uid, flask_request):
224224 account = ldap_get_member (uid )
225225 active_member = post_data ['activeMember' ]
226226
227- room_number = post_data ['roomNumber' ]
228- onfloor_status = post_data ['onfloorStatus' ]
229- housing_points = post_data ['housingPoints' ]
230- log .info ('Edit {} - Room: {} On-Floor: {} Points: {}' .format (
231- uid ,
232- post_data ['roomNumber' ],
233- post_data ['onfloorStatus' ],
234- post_data ['housingPoints' ]))
235-
236- ldap_set_roomnumber (account , room_number )
237- if onfloor_status :
238- # If a OnFloorStatusAssigned object exists, don't make another
239- if not ldap_is_member_of_group (account , "onfloor" ):
240- db .session .add (OnFloorStatusAssigned (uid , datetime .now ()))
241- ldap_add_member_to_group (account , "onfloor" )
242- else :
243- for ofs in OnFloorStatusAssigned .query .filter (OnFloorStatusAssigned .uid == uid ):
244- db .session .delete (ofs )
245- db .session .flush ()
246- db .session .commit ()
247-
248- if ldap_is_member_of_group (account , "onfloor" ):
249- ldap_remove_member_from_group (account , "onfloor" )
250- ldap_set_housingpoints (account , housing_points )
227+ username = flask_request .headers .get ('x-webauth-user' )
228+ current_account = ldap_get_member (username )
229+ if ldap_is_eval_director (current_account ):
230+ room_number = post_data ['roomNumber' ]
231+ onfloor_status = post_data ['onfloorStatus' ]
232+ housing_points = post_data ['housingPoints' ]
233+ log .info ('Edit {} - Room: {} On-Floor: {} Points: {}' .format (
234+ uid ,
235+ post_data ['roomNumber' ],
236+ post_data ['onfloorStatus' ],
237+ post_data ['housingPoints' ]))
238+
239+ ldap_set_roomnumber (account , room_number )
240+ if onfloor_status :
241+ # If a OnFloorStatusAssigned object exists, don't make another
242+ if not ldap_is_member_of_group (account , "onfloor" ):
243+ db .session .add (OnFloorStatusAssigned (uid , datetime .now ()))
244+ ldap_add_member_to_group (account , "onfloor" )
245+ else :
246+ for ofs in OnFloorStatusAssigned .query .filter (OnFloorStatusAssigned .uid == uid ):
247+ db .session .delete (ofs )
248+ db .session .flush ()
249+ db .session .commit ()
250+
251+ if ldap_is_member_of_group (account , "onfloor" ):
252+ ldap_remove_member_from_group (account , "onfloor" )
253+ ldap_set_housingpoints (account , housing_points )
251254
252255 # Only update if there's a diff
253256 log .info ('Set {} Active: {}' .format (uid , active_member ))
0 commit comments