|
|
@ -257,7 +257,7 @@ class CollegesController < ApplicationController
|
|
|
|
unless (User.current.admin? ||
|
|
|
|
unless (User.current.admin? ||
|
|
|
|
DepartmentMember.where(:user_id => User.current.id, :department_id => @department.id).first.present? ||
|
|
|
|
DepartmentMember.where(:user_id => User.current.id, :department_id => @department.id).first.present? ||
|
|
|
|
(User.current.user_extensions.try(:school_id) == @department.school_id && User.current.user_extensions.try(:identity) == 0) ||
|
|
|
|
(User.current.user_extensions.try(:school_id) == @department.school_id && User.current.user_extensions.try(:identity) == 0) ||
|
|
|
|
@department.school.try(:partner_id) == User.current.partner_id)
|
|
|
|
(@department.school.try(:customer_id) && User.current.try(:partner).try(:customer_ids) && User.current.try(:partner).try(:customer_ids).include?(@department.school.try(:customer_id))))
|
|
|
|
render_403
|
|
|
|
render_403
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|