gateway4labs/lms4labs

Labmanager does not check if the user is admin in requests

Closed this issue · 0 comments

In the following code:

            if course_permission.course.course_id in courses:
                # Let the server choose among the best possible configuration
                courses_configurations.append(course_permission.configuration)

It does not check if the user is an administrator (in which case, the user should be able to use any laboratory).