diff --git a/backend/src/middleware/auth/checks/submission-checks.ts b/backend/src/middleware/auth/checks/submission-checks.ts index bd895aec..7cd75c8d 100644 --- a/backend/src/middleware/auth/checks/submission-checks.ts +++ b/backend/src/middleware/auth/checks/submission-checks.ts @@ -34,7 +34,7 @@ export const onlyAllowIfHasAccessToSubmissionFromParams = authorize(async (auth: const { classId, assignmentId, groupId } = req.query; requireFields({ classId, assignmentId, groupId }); - + if (auth.accountType === AccountType.Teacher) { const cls = await fetchClass(classId as string); return cls.teachers.map(mapToUsername).includes(auth.username); @@ -42,4 +42,4 @@ export const onlyAllowIfHasAccessToSubmissionFromParams = authorize(async (auth: const group = await fetchGroup(classId as string, Number(assignmentId as string), Number(groupId as string)); return group.members.map(mapToUsername).includes(auth.username); -}); \ No newline at end of file +}); diff --git a/backend/src/routes/submissions.ts b/backend/src/routes/submissions.ts index 31f71381..58176b40 100644 --- a/backend/src/routes/submissions.ts +++ b/backend/src/routes/submissions.ts @@ -1,6 +1,10 @@ import express from 'express'; import { createSubmissionHandler, deleteSubmissionHandler, getSubmissionHandler, getSubmissionsHandler } from '../controllers/submissions.js'; -import { onlyAllowIfHasAccessToSubmission, onlyAllowIfHasAccessToSubmissionFromParams, onlyAllowSubmitter } from '../middleware/auth/checks/submission-checks.js'; +import { + onlyAllowIfHasAccessToSubmission, + onlyAllowIfHasAccessToSubmissionFromParams, + onlyAllowSubmitter, +} from '../middleware/auth/checks/submission-checks.js'; import { studentsOnly } from '../middleware/auth/checks/auth-checks.js'; const router = express.Router({ mergeParams: true });