@@ -224,30 +224,33 @@ def edit_uid(uid, flask_request):
224
224
account = ldap_get_member (uid )
225
225
active_member = post_data ['activeMember' ]
226
226
227
- room_number = post_data ['roomNumber' ]
228
- onfloor_status = post_data ['onfloorStatus' ]
229
- housing_points = post_data ['housingPoints' ]
230
- log .info ('Edit {} - Room: {} On-Floor: {} Points: {}' .format (
231
- uid ,
232
- post_data ['roomNumber' ],
233
- post_data ['onfloorStatus' ],
234
- post_data ['housingPoints' ]))
235
-
236
- ldap_set_roomnumber (account , room_number )
237
- if onfloor_status :
238
- # If a OnFloorStatusAssigned object exists, don't make another
239
- if not ldap_is_member_of_group (account , "onfloor" ):
240
- db .session .add (OnFloorStatusAssigned (uid , datetime .now ()))
241
- ldap_add_member_to_group (account , "onfloor" )
242
- else :
243
- for ofs in OnFloorStatusAssigned .query .filter (OnFloorStatusAssigned .uid == uid ):
244
- db .session .delete (ofs )
245
- db .session .flush ()
246
- db .session .commit ()
247
-
248
- if ldap_is_member_of_group (account , "onfloor" ):
249
- ldap_remove_member_from_group (account , "onfloor" )
250
- ldap_set_housingpoints (account , housing_points )
227
+ username = flask_request .headers .get ('x-webauth-user' )
228
+ current_account = ldap_get_member (username )
229
+ if ldap_is_eval_director (current_account ):
230
+ room_number = post_data ['roomNumber' ]
231
+ onfloor_status = post_data ['onfloorStatus' ]
232
+ housing_points = post_data ['housingPoints' ]
233
+ log .info ('Edit {} - Room: {} On-Floor: {} Points: {}' .format (
234
+ uid ,
235
+ post_data ['roomNumber' ],
236
+ post_data ['onfloorStatus' ],
237
+ post_data ['housingPoints' ]))
238
+
239
+ ldap_set_roomnumber (account , room_number )
240
+ if onfloor_status :
241
+ # If a OnFloorStatusAssigned object exists, don't make another
242
+ if not ldap_is_member_of_group (account , "onfloor" ):
243
+ db .session .add (OnFloorStatusAssigned (uid , datetime .now ()))
244
+ ldap_add_member_to_group (account , "onfloor" )
245
+ else :
246
+ for ofs in OnFloorStatusAssigned .query .filter (OnFloorStatusAssigned .uid == uid ):
247
+ db .session .delete (ofs )
248
+ db .session .flush ()
249
+ db .session .commit ()
250
+
251
+ if ldap_is_member_of_group (account , "onfloor" ):
252
+ ldap_remove_member_from_group (account , "onfloor" )
253
+ ldap_set_housingpoints (account , housing_points )
251
254
252
255
# Only update if there's a diff
253
256
log .info ('Set {} Active: {}' .format (uid , active_member ))
0 commit comments