From 82fa0f0aafdf1cec21cec398397bd1c38839ddd2 Mon Sep 17 00:00:00 2001
From: cxt <pinecxt@163.com>
Date: Thu, 24 Dec 2015 15:28:11 +0800
Subject: [PATCH] =?UTF-8?q?=E5=85=AC=E5=BC=80=E7=9A=84=E8=AF=BE=E7=A8=8B?=
 =?UTF-8?q?=E4=B8=8D=E5=8B=BE=E9=80=89=E2=80=9C=E5=AD=A6=E7=94=9F=E5=88=97?=
 =?UTF-8?q?=E8=A1=A8=E5=85=AC=E5=BC=80=E2=80=9D=EF=BC=8C=E4=BD=86=E9=9D=9E?=
 =?UTF-8?q?=E8=AF=BE=E7=A8=8B=E6=88=90=E5=91=98=E5=8D=B4=E5=8F=AF=E4=BB=A5?=
 =?UTF-8?q?=E9=80=9A=E8=BF=87url=E8=AE=BF=E9=97=AE=E8=AF=A5=E8=AF=BE?=
 =?UTF-8?q?=E7=A8=8B=E5=AD=A6=E7=94=9F=E5=88=97=E8=A1=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/controllers/courses_controller.rb | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/app/controllers/courses_controller.rb b/app/controllers/courses_controller.rb
index aa0e1596f..8bd91b089 100644
--- a/app/controllers/courses_controller.rb
+++ b/app/controllers/courses_controller.rb
@@ -293,10 +293,15 @@ class CoursesController < ApplicationController
           @all_members = searchTeacherAndAssistant(@course)
           @members =  @all_members
         when '2'
-          @subPage_title = l :label_student_list
-          page = params[:page].nil? ? 0 : (params['page'].to_i - 1)
-          @all_members = student_homework_score(0,page, 10,"desc")
-          @members =  @all_members
+          if @course.open_student == 1 || User.current.member_of_course?(@course)
+            @subPage_title = l :label_student_list
+            page = params[:page].nil? ? 0 : (params['page'].to_i - 1)
+            @all_members = student_homework_score(0,page, 10,"desc")
+            @members =  @all_members
+          else
+            render_403
+            return
+          end
       end
       respond_to do |format|
         if params[:page]