@@ -56,8 +56,9 @@ def display_member_management():
5656 log .info ('frontend' , action = 'display member management' )
5757
5858 username = request .headers .get ('x-webauth-user' )
59+ account = ldap_get_member (username )
5960
60- if not ldap_is_eval_director (username ) and not ldap_is_financial_director (username ):
61+ if not ldap_is_eval_director (account ) and not ldap_is_financial_director (account ):
6162 return "must be eval director" , 403
6263
6364 member_list = get_members_info ()
@@ -102,8 +103,9 @@ def member_management_eval():
102103 log .info ('api' , action = 'submit site settings' )
103104
104105 username = request .headers .get ('x-webauth-user' )
106+ account = ldap_get_member (username )
105107
106- if not ldap_is_eval_director (username ):
108+ if not ldap_is_eval_director (account ):
107109 return "must be eval director" , 403
108110
109111 post_data = request .get_json ()
@@ -134,8 +136,9 @@ def member_management_adduser():
134136 log .info ('api' , action = 'add fid user' )
135137
136138 username = request .headers .get ('x-webauth-user' )
139+ account = ldap_get_member (username )
137140
138- if not ldap_is_eval_director (username ):
141+ if not ldap_is_eval_director (account ):
139142 return "must be eval director" , 403
140143
141144 post_data = request .get_json ()
@@ -158,8 +161,9 @@ def member_management_adduser():
158161@member_management_bp .route ('/manage/user/upload' , methods = ['POST' ])
159162def member_management_uploaduser ():
160163 username = request .headers .get ('x-webauth-user' )
164+ account = ldap_get_member (username )
161165
162- if not ldap_is_eval_director (username ):
166+ if not ldap_is_eval_director (account ):
163167 return "must be eval director" , 403
164168
165169 f = request .files ['file' ]
@@ -195,8 +199,9 @@ def member_management_edituser(uid):
195199 log .info ('api' , action = 'edit uid user' )
196200
197201 username = request .headers .get ('x-webauth-user' )
202+ account = ldap_get_member (username )
198203
199- if not ldap_is_eval_director (username ) and not ldap_is_financial_director (username ):
204+ if not ldap_is_eval_director (account ) and not ldap_is_financial_director (account ):
200205 return "must be eval director" , 403
201206
202207 post_data = request .get_json ()
@@ -219,7 +224,8 @@ def edit_uid(uid, username, post_data):
219224 onfloor_status = post_data ['onfloorStatus' ]
220225 housing_points = post_data ['housingPoints' ]
221226
222- if ldap_is_eval_director (username ):
227+ current_account = ldap_get_member (username )
228+ if ldap_is_eval_director (current_account ):
223229 logger .info ('backend' , action = "edit %s room: %s onfloor: %s housepts %s" %
224230 (uid , post_data ['roomNumber' ], post_data ['onfloorStatus' ],
225231 post_data ['housingPoints' ]))
@@ -296,8 +302,9 @@ def member_management_getuserinfo(uid):
296302 log .info ('api' , action = 'retrieve user info' )
297303
298304 username = request .headers .get ('x-webauth-user' )
305+ account = ldap_get_member (username )
299306
300- if not ldap_is_eval_director (username ) and not ldap_is_financial_director (username ):
307+ if not ldap_is_eval_director (account ) and not ldap_is_financial_director (account ):
301308 return "must be eval or financial director" , 403
302309
303310 acct = None
@@ -341,7 +348,7 @@ def get_hm_date(hm_id):
341348
342349 account = ldap_get_member (uid )
343350
344- if ldap_is_eval_director (username ):
351+ if ldap_is_eval_director (ldap_get_member ( username ) ):
345352 missed_hm = [
346353 {
347354 'date' : get_hm_date (hma .meeting_id ),
@@ -382,8 +389,9 @@ def member_management_deleteuser(fid):
382389 log .info ('api' , action = 'edit fid user' )
383390
384391 username = request .headers .get ('x-webauth-user' )
392+ account = ldap_get_member (username )
385393
386- if not ldap_is_eval_director (username ):
394+ if not ldap_is_eval_director (account ):
387395 return "must be eval director" , 403
388396
389397 if not fid .isdigit ():
@@ -417,8 +425,9 @@ def member_management_upgrade_user():
417425 log .info ('api' , action = 'convert fid to uid entry' )
418426
419427 username = request .headers .get ('x-webauth-user' )
428+ account = ldap_get_member (username )
420429
421- if not ldap_is_eval_director (username ):
430+ if not ldap_is_eval_director (account ):
422431 return "must be eval director" , 403
423432
424433 post_data = request .get_json ()
@@ -479,8 +488,9 @@ def introductory_project():
479488 log .info ('api' , action = 'show introductory project management' )
480489
481490 username = request .headers .get ('x-webauth-user' )
491+ account = ldap_get_member (username )
482492
483- if not ldap_is_eval_director (username ):
493+ if not ldap_is_eval_director (account ):
484494 return "must be eval director" , 403
485495
486496 return render_template (request ,
@@ -496,8 +506,9 @@ def introductory_project_submit():
496506 log .info ('api' , action = 'submit introductory project results' )
497507
498508 username = request .headers .get ('x-webauth-user' )
509+ account = ldap_get_member (username )
499510
500- if not ldap_is_eval_director (username ):
511+ if not ldap_is_eval_director (account ):
501512 return "must be eval director" , 403
502513
503514 post_data = request .get_json ()
0 commit comments