@@ -224,30 +224,33 @@ def edit_uid(uid, flask_request):
224224    account  =  ldap_get_member (uid )
225225    active_member  =  post_data ['activeMember' ]
226226
227-     room_number  =  post_data ['roomNumber' ]
228-     onfloor_status  =  post_data ['onfloorStatus' ]
229-     housing_points  =  post_data ['housingPoints' ]
230-     log .info ('Edit {} - Room: {} On-Floor: {} Points: {}' .format (
231-         uid ,
232-         post_data ['roomNumber' ],
233-         post_data ['onfloorStatus' ],
234-         post_data ['housingPoints' ]))
235- 
236-     ldap_set_roomnumber (account , room_number )
237-     if  onfloor_status :
238-         # If a OnFloorStatusAssigned object exists, don't make another 
239-         if  not  ldap_is_member_of_group (account , "onfloor" ):
240-             db .session .add (OnFloorStatusAssigned (uid , datetime .now ()))
241-             ldap_add_member_to_group (account , "onfloor" )
242-     else :
243-         for  ofs  in  OnFloorStatusAssigned .query .filter (OnFloorStatusAssigned .uid  ==  uid ):
244-             db .session .delete (ofs )
245-         db .session .flush ()
246-         db .session .commit ()
247- 
248-         if  ldap_is_member_of_group (account , "onfloor" ):
249-             ldap_remove_member_from_group (account , "onfloor" )
250-     ldap_set_housingpoints (account , housing_points )
227+     username  =  flask_request .headers .get ('x-webauth-user' )
228+     current_account  =  ldap_get_member (username )
229+     if  ldap_is_eval_director (current_account ):
230+         room_number  =  post_data ['roomNumber' ]
231+         onfloor_status  =  post_data ['onfloorStatus' ]
232+         housing_points  =  post_data ['housingPoints' ]
233+         log .info ('Edit {} - Room: {} On-Floor: {} Points: {}' .format (
234+             uid ,
235+             post_data ['roomNumber' ],
236+             post_data ['onfloorStatus' ],
237+             post_data ['housingPoints' ]))
238+ 
239+         ldap_set_roomnumber (account , room_number )
240+         if  onfloor_status :
241+             # If a OnFloorStatusAssigned object exists, don't make another 
242+             if  not  ldap_is_member_of_group (account , "onfloor" ):
243+                 db .session .add (OnFloorStatusAssigned (uid , datetime .now ()))
244+                 ldap_add_member_to_group (account , "onfloor" )
245+         else :
246+             for  ofs  in  OnFloorStatusAssigned .query .filter (OnFloorStatusAssigned .uid  ==  uid ):
247+                 db .session .delete (ofs )
248+             db .session .flush ()
249+             db .session .commit ()
250+ 
251+             if  ldap_is_member_of_group (account , "onfloor" ):
252+                 ldap_remove_member_from_group (account , "onfloor" )
253+         ldap_set_housingpoints (account , housing_points )
251254
252255    # Only update if there's a diff 
253256    log .info ('Set {} Active: {}' .format (uid , active_member ))
0 commit comments