@ -18,7 +18,7 @@ class HomeworkAttachController < ApplicationController
end
defcreate
ifUser.current.logged?&&(!Member.where('user_id = ? and project_id = ?',User.current.id,@bid.courses.first.id).first.nil?&&(Member.where('user_id = ? and project_id = ?',User.current.id,@bid.courses.first.id).first.roles&Role.where('id = ? or id = ? or id =?',5,10,7)).size>0)
#if User.current.logged? && (!Member.where('user_id = ? and project_id = ?', User.current.id, @bid.courses.first.id).first.nil? && (Member.where('user_id = ? and project_id = ?', User.current.id, @bid.courses.first.id).first.roles&Role.where('id = ? or id = ? or id =?',5, 10, 7)).size >0)
user_id=params[:user_id]
bid_id=params[:bid_id]
sta=0
@ -32,21 +32,22 @@ class HomeworkAttachController < ApplicationController
:bid_id=>bid_id
}
#@bid = Bid.find bid_id
#@homework_list = @bid.homeworks
@homework=HomeworkAttach.new(options)
@homework.save_attachments(params[:attachments])
render_attachment_warning_if_needed(@homework)
@homework.save
respond_todo|format|
if@homework.save
format.html{redirect_to@homework,notice:'Post was successfully created.'}
ifUser.current.logged?&&(User.current.admin?||(!Member.where('user_id = ? and project_id = ?',User.current.id,project.bid.courses.first.id).first.nil?&&(Member.where('user_id = ? and project_id = ?',User.current.id,project.bid.courses.first.id).first.roles&Role.where('id = ? or id = ?',3,7)).size>0)||project.user_id==User.current.id)