Commit 2694a7d4 authored by Daniel W Bond's avatar Daniel W Bond
Browse files

my tests caught something

parent 8b5c1549
......@@ -566,8 +566,8 @@ class DeleteConfirmation(LoginRequiredMixin, DeleteView):
current_url = self.request.get_full_path()
confirmer_uname = current_url.split('/')[3]
# not catching exceptions here; that's handled in get_object
confirmer = Student.objects.get(user__username=confirmer_uname)
# only the person who created the confirmation may delete it
if not(requester == confirmer):
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment