cafe-grader-web

Commit r305:a5e98b239050 public

parent | child
Description:
prevents user from viewing own sources submitted to unavailable problems
Commit status:
[Not Reviewed]
References:
default
Diff options:
Raw Diff | Patch Diff | Download Diff | Show whitespace | Increase context
Comments:
0 Commit comments 0 Inline Comments
Unresolved TODOs:
There are no unresolved TODOs
Side by Side Unified
Expand All Files Collapse All Files Wide Mode Diff
Add another comment
Browse Files

r305:a5e98b239050 - - 1 file changed: 3 inserted, 1 deleted

Show file before | Show file after | Raw diff | Download diff | Show whitespace Increase context Show commentsHide comments
@@ -1,188 +1,190
1 class MainController < ApplicationController
1 class MainController < ApplicationController
2
2
3 before_filter :authenticate, :except => [:index, :login]
3 before_filter :authenticate, :except => [:index, :login]
4 before_filter :check_viewability, :except => [:index, :login]
4 before_filter :check_viewability, :except => [:index, :login]
5
5
6 append_before_filter :confirm_and_update_start_time,
6 append_before_filter :confirm_and_update_start_time,
7 :except => [:index,
7 :except => [:index,
8 :login,
8 :login,
9 :confirm_contest_start]
9 :confirm_contest_start]
10
10
11 # to prevent log in box to be shown when user logged out of the
11 # to prevent log in box to be shown when user logged out of the
12 # system only in some tab
12 # system only in some tab
13 prepend_before_filter :reject_announcement_refresh_when_logged_out,
13 prepend_before_filter :reject_announcement_refresh_when_logged_out,
14 :only => [:announcements]
14 :only => [:announcements]
15
15
16 # COMMENTED OUT: filter in each action instead
16 # COMMENTED OUT: filter in each action instead
17 # before_filter :verify_time_limit, :only => [:submit]
17 # before_filter :verify_time_limit, :only => [:submit]
18
18
19 verify :method => :post, :only => [:submit],
19 verify :method => :post, :only => [:submit],
20 :redirect_to => { :action => :index }
20 :redirect_to => { :action => :index }
21
21
22 # COMMENT OUT: only need when having high load
22 # COMMENT OUT: only need when having high load
23 # caches_action :index, :login
23 # caches_action :index, :login
24
24
25 # NOTE: This method is not actually needed, 'config/routes.rb' has
25 # NOTE: This method is not actually needed, 'config/routes.rb' has
26 # assigned action login as a default action.
26 # assigned action login as a default action.
27 def index
27 def index
28 redirect_to :action => 'login'
28 redirect_to :action => 'login'
29 end
29 end
30
30
31 def login
31 def login
32 saved_notice = flash[:notice]
32 saved_notice = flash[:notice]
33 reset_session
33 reset_session
34 flash.now[:notice] = saved_notice
34 flash.now[:notice] = saved_notice
35
35
36 # EXPERIMENT:
36 # EXPERIMENT:
37 # Hide login if in single user mode and the url does not
37 # Hide login if in single user mode and the url does not
38 # explicitly specify /login
38 # explicitly specify /login
39 #
39 #
40 # logger.info "PATH: #{request.path}"
40 # logger.info "PATH: #{request.path}"
41 # if Configuration['system.single_user_mode'] and
41 # if Configuration['system.single_user_mode'] and
42 # request.path!='/main/login'
42 # request.path!='/main/login'
43 # @hidelogin = true
43 # @hidelogin = true
44 # end
44 # end
45
45
46 @announcements = Announcement.find_for_frontpage
46 @announcements = Announcement.find_for_frontpage
47 render :action => 'login', :layout => 'empty'
47 render :action => 'login', :layout => 'empty'
48 end
48 end
49
49
50 def list
50 def list
51 prepare_list_information
51 prepare_list_information
52 end
52 end
53
53
54 def help
54 def help
55 @user = User.find(session[:user_id])
55 @user = User.find(session[:user_id])
56 end
56 end
57
57
58 def submit
58 def submit
59 user = User.find(session[:user_id])
59 user = User.find(session[:user_id])
60
60
61 @submission = Submission.new(params[:submission])
61 @submission = Submission.new(params[:submission])
62 @submission.user = user
62 @submission.user = user
63 @submission.language_id = 0
63 @submission.language_id = 0
64 if (params['file']) and (params['file']!='')
64 if (params['file']) and (params['file']!='')
65 @submission.source = params['file'].read
65 @submission.source = params['file'].read
66 @submission.source_filename = params['file'].original_filename
66 @submission.source_filename = params['file'].original_filename
67 end
67 end
68 @submission.submitted_at = Time.new.gmtime
68 @submission.submitted_at = Time.new.gmtime
69
69
70 if Configuration.time_limit_mode? and user.contest_finished?
70 if Configuration.time_limit_mode? and user.contest_finished?
71 @submission.errors.add_to_base "The contest is over."
71 @submission.errors.add_to_base "The contest is over."
72 prepare_list_information
72 prepare_list_information
73 render :action => 'list' and return
73 render :action => 'list' and return
74 end
74 end
75
75
76 if @submission.valid?
76 if @submission.valid?
77 if @submission.save == false
77 if @submission.save == false
78 flash[:notice] = 'Error saving your submission'
78 flash[:notice] = 'Error saving your submission'
79 elsif Task.create(:submission_id => @submission.id,
79 elsif Task.create(:submission_id => @submission.id,
80 :status => Task::STATUS_INQUEUE) == false
80 :status => Task::STATUS_INQUEUE) == false
81 flash[:notice] = 'Error adding your submission to task queue'
81 flash[:notice] = 'Error adding your submission to task queue'
82 end
82 end
83 else
83 else
84 prepare_list_information
84 prepare_list_information
85 render :action => 'list' and return
85 render :action => 'list' and return
86 end
86 end
87 redirect_to :action => 'list'
87 redirect_to :action => 'list'
88 end
88 end
89
89
90 def source
90 def source
91 submission = Submission.find(params[:id])
91 submission = Submission.find(params[:id])
92 - if submission.user_id == session[:user_id]
92 + if ((submission.user_id == session[:user_id]) and
93 + (submission.problem != nil) and
94 + (submission.problem.available))
93 send_data(submission.source,
95 send_data(submission.source,
94 {:filename => submission.download_filename,
96 {:filename => submission.download_filename,
95 :type => 'text/plain'})
97 :type => 'text/plain'})
96 else
98 else
97 flash[:notice] = 'Error viewing source'
99 flash[:notice] = 'Error viewing source'
98 redirect_to :action => 'list'
100 redirect_to :action => 'list'
99 end
101 end
100 end
102 end
101
103
102 def compiler_msg
104 def compiler_msg
103 @submission = Submission.find(params[:id])
105 @submission = Submission.find(params[:id])
104 if @submission.user_id == session[:user_id]
106 if @submission.user_id == session[:user_id]
105 render :action => 'compiler_msg', :layout => 'empty'
107 render :action => 'compiler_msg', :layout => 'empty'
106 else
108 else
107 flash[:notice] = 'Error viewing source'
109 flash[:notice] = 'Error viewing source'
108 redirect_to :action => 'list'
110 redirect_to :action => 'list'
109 end
111 end
110 end
112 end
111
113
112 def submission
114 def submission
113 @user = User.find(session[:user_id])
115 @user = User.find(session[:user_id])
114 @problems = @user.available_problems
116 @problems = @user.available_problems
115 if params[:id]==nil
117 if params[:id]==nil
116 @problem = nil
118 @problem = nil
117 @submissions = nil
119 @submissions = nil
118 else
120 else
119 @problem = Problem.find_by_name(params[:id])
121 @problem = Problem.find_by_name(params[:id])
120 if not @problem.available
122 if not @problem.available
121 redirect_to :action => 'list'
123 redirect_to :action => 'list'
122 flash[:notice] = 'Error: submissions for that problem are not viewable.'
124 flash[:notice] = 'Error: submissions for that problem are not viewable.'
123 return
125 return
124 end
126 end
125 @submissions = Submission.find_all_by_user_problem(@user.id, @problem.id)
127 @submissions = Submission.find_all_by_user_problem(@user.id, @problem.id)
126 end
128 end
127 end
129 end
128
130
129 def result
131 def result
130 if !Configuration.show_grading_result
132 if !Configuration.show_grading_result
131 redirect_to :action => 'list' and return
133 redirect_to :action => 'list' and return
132 end
134 end
133 @user = User.find(session[:user_id])
135 @user = User.find(session[:user_id])
134 @submission = Submission.find(params[:id])
136 @submission = Submission.find(params[:id])
135 if @submission.user!=@user
137 if @submission.user!=@user
136 flash[:notice] = 'You are not allowed to view result of other users.'
138 flash[:notice] = 'You are not allowed to view result of other users.'
137 redirect_to :action => 'list' and return
139 redirect_to :action => 'list' and return
138 end
140 end
139 prepare_grading_result(@submission)
141 prepare_grading_result(@submission)
140 end
142 end
141
143
142 def load_output
144 def load_output
143 if !Configuration.show_grading_result or params[:num]==nil
145 if !Configuration.show_grading_result or params[:num]==nil
144 redirect_to :action => 'list' and return
146 redirect_to :action => 'list' and return
145 end
147 end
146 @user = User.find(session[:user_id])
148 @user = User.find(session[:user_id])
147 @submission = Submission.find(params[:id])
149 @submission = Submission.find(params[:id])
148 if @submission.user!=@user
150 if @submission.user!=@user
149 flash[:notice] = 'You are not allowed to view result of other users.'
151 flash[:notice] = 'You are not allowed to view result of other users.'
150 redirect_to :action => 'list' and return
152 redirect_to :action => 'list' and return
151 end
153 end
152 case_num = params[:num].to_i
154 case_num = params[:num].to_i
153 out_filename = output_filename(@user.login,
155 out_filename = output_filename(@user.login,
154 @submission.problem.name,
156 @submission.problem.name,
155 @submission.id,
157 @submission.id,
156 case_num)
158 case_num)
157 if !FileTest.exists?(out_filename)
159 if !FileTest.exists?(out_filename)
158 flash[:notice] = 'Output not found.'
160 flash[:notice] = 'Output not found.'
159 redirect_to :action => 'list' and return
161 redirect_to :action => 'list' and return
160 end
162 end
161
163
162 if defined?(USE_APACHE_XSENDFILE) and USE_APACHE_XSENDFILE
164 if defined?(USE_APACHE_XSENDFILE) and USE_APACHE_XSENDFILE
163 response.headers['Content-Type'] = "application/force-download"
165 response.headers['Content-Type'] = "application/force-download"
164 response.headers['Content-Disposition'] = "attachment; filename=\"output-#{case_num}.txt\""
166 response.headers['Content-Disposition'] = "attachment; filename=\"output-#{case_num}.txt\""
165 response.headers["X-Sendfile"] = out_filename
167 response.headers["X-Sendfile"] = out_filename
166 response.headers['Content-length'] = File.size(out_filename)
168 response.headers['Content-length'] = File.size(out_filename)
167 render :nothing => true
169 render :nothing => true
168 else
170 else
169 send_file out_filename, :stream => false, :filename => "output-#{case_num}.txt", :type => "text/plain"
171 send_file out_filename, :stream => false, :filename => "output-#{case_num}.txt", :type => "text/plain"
170 end
172 end
171 end
173 end
172
174
173 def error
175 def error
174 @user = User.find(session[:user_id])
176 @user = User.find(session[:user_id])
175 end
177 end
176
178
177 # announcement refreshing and hiding methods
179 # announcement refreshing and hiding methods
178
180
179 def announcements
181 def announcements
180 if params.has_key? 'recent'
182 if params.has_key? 'recent'
181 prepare_announcements(params[:recent])
183 prepare_announcements(params[:recent])
182 else
184 else
183 prepare_announcements
185 prepare_announcements
184 end
186 end
185 render(:partial => 'announcement',
187 render(:partial => 'announcement',
186 :collection => @announcements,
188 :collection => @announcements,
187 :locals => {:announcement_effect => true})
189 :locals => {:announcement_effect => true})
188 end
190 end
You need to be logged in to leave comments. Login now