Changeset 119

Timestamp:

13/10/07 02:48:28 (5 years ago)

Author:

nigel.sim

Message:

• Check permissions before displaying
• Remove body

File:

• roster/trunk/roster.module (modified) (3 diffs)

roster/trunk/roster.module

@@ -198 +198 @@
   if ($form_values['aid'] != NULL){
     db_query("UPDATE {roster_assignment} SET person=%d, notes='%s' WHERE aid=%d;",  $form_values['person'], $form_values['notes'], $form_values['aid']);
-    print sprintf("UPDATE {roster_assignment} SET person=%d, notes='%s' WHERE aid=%d;",  $form_values['person'], $form_values['notes'], $form_values['aid']);
   } else {
     db_query("INSERT INTO {roster_assignment} (bid, period, person, notes) 
-      VALUES (%d, %d, %d, '%s');", $form_values['bid'], $form_values['period'], $form_values['person'], $form_values['notes']);
-    print sprintf("INSERT INTO {roster_assignment} (bid, period, person, notes) 
       VALUES (%d, %d, %d, '%s');", $form_values['bid'], $form_values['period'], $form_values['person'], $form_values['notes']);
   }
@@ -212 +209 @@
  */
 function roster_view($node, $teaser = FALSE, $page = FALSE) {
+  if (!user_access('assign booths'))
+    return FALSE;
   $node = node_prepare($node, $teaser);
   $node->content['myfield'] = array(
@@ -242 +241 @@
   );
 
+  $node->content['body'] = NULL;
   return $node;
 }