# HG changeset patch
# User Jittat Fakcharoenphol <jittat@gmail.com>
# Date 2010-05-04 16:21:16
# Node ID a5e98b239050562aab0a9443cf054a53992e3962
# Parent  a6eab16005af957f79c3a42b33c3a630af4b4428

prevents user from viewing own sources submitted to unavailable problems

diff --git a/app/controllers/main_controller.rb b/app/controllers/main_controller.rb
--- a/app/controllers/main_controller.rb
+++ b/app/controllers/main_controller.rb
@@ -89,7 +89,9 @@
 
   def source
     submission = Submission.find(params[:id])
-    if submission.user_id == session[:user_id]
+    if ((submission.user_id == session[:user_id]) and 
+        (submission.problem != nil) and 
+        (submission.problem.available))
       send_data(submission.source, 
 		{:filename => submission.download_filename, 
                   :type => 'text/plain'})