Commit 2694a7d4 authored by Daniel W Bond's avatar Daniel W Bond

my tests caught something

parent 8b5c1549
......@@ -566,8 +566,8 @@ class DeleteConfirmation(LoginRequiredMixin, DeleteView):
current_url = self.request.get_full_path()
confirmer_uname = current_url.split('/')[3]
# not catching exceptions here; that's handled in get_object
confirmer = Student.objects.get(user__username=confirmer_uname)
# only the person who created the confirmation may delete it
if not(requester == confirmer):
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment