From: Mike G. v. a. <we...@ma...> - 2010-05-25 18:46:10
|
Log Message: ----------- print problemSourceFile and problemSeed when the instructor is viewing a problem. This enables the "temporary file" capability of the problem editor. Modified Files: -------------- webwork2/lib/WeBWorK/ContentGenerator: Problem.pm Revision Data ------------- Index: Problem.pm =================================================================== RCS file: /webwork/cvs/system/webwork2/lib/WeBWorK/ContentGenerator/Problem.pm,v retrieving revision 1.222 retrieving revision 1.223 diff -Llib/WeBWorK/ContentGenerator/Problem.pm -Llib/WeBWorK/ContentGenerator/Problem.pm -u -r1.222 -r1.223 --- lib/WeBWorK/ContentGenerator/Problem.pm +++ lib/WeBWorK/ContentGenerator/Problem.pm @@ -1131,15 +1131,18 @@ ) if defined($self->{editMode}) and $self->{editMode} eq 'temporaryFile'; # this is a security risk -- students can use this to find the source code for the problem -# print( CGI::hidden( -# -name => 'sourceFilePath', -# -value => $self->{problem}->{source_file} -# )) if defined($self->{problem}->{source_file}); + my $permissionLevel = $db->getPermissionLevel($user)->permission; + my $professorPermissionLevel = $ce->{userRoles}->{professor}; + warn "checking permssionlevel", $permissionLevel>= $professorPermissionLevel; + print( CGI::hidden( + -name => 'sourceFilePath', + -value => $self->{problem}->{source_file} + )) if defined($self->{problem}->{source_file}) and $permissionLevel>= $professorPermissionLevel; # only allow this for professors -# print( CGI::hidden( -# -name => 'problemSeed', -# -value => $r->param("problemSeed") -# )) if defined($r->param("problemSeed")); + print( CGI::hidden( + -name => 'problemSeed', + -value => $r->param("problemSeed") + )) if defined($r->param("problemSeed")) and $permissionLevel>= $professorPermissionLevel; # only allow this for professors # end of main form print CGI::endform(); |