# HG changeset patch
# User HIROSE Yuuji <yuuji@gentei.org>
# Date 1438002736 -32400
# Node ID 54bbd7ce37663c389cf4938000764735288a9d9f
# Parent  da23cad20e4a5c91afe876598c32d6c6f32f8895
Inhibit non-group-member from *handout

diff -r da23cad20e4a -r 54bbd7ce3766 s4-blog.sh
--- a/s4-blog.sh	Mon Jul 27 17:37:30 2015 +0900
+++ b/s4-blog.sh	Mon Jul 27 22:12:16 2015 +0900
@@ -58,6 +58,7 @@
   ts=${tbl}_s tm=${tbl}_m
   at=article as=article_s am=article_m
   serial=$(($(date +%s)-1420038000))s$$
+  blog_writable $rowid $user && iswritable=true || iswritable=false
   # This function grasps blog entry definiton directly.
   # blog:   id
   # blog_s: title,ctime,heading
@@ -76,8 +77,10 @@
 EOF
 
   href="<a href=\"?editheading+$rowid\"> 編集 </a>"
-  href2="<a href=\"?lshandout+$rowid\"> 提出状況 </a>"
-  href3="(<a href=\"?gethandout+$rowid\">ファイル取得</a>)"
+  if $iswritable; then
+    href2="<a href=\"?lshandout+$rowid\"> 提出状況 </a>"
+    href3="(<a href=\"?gethandout+$rowid\">ファイル取得</a>)"
+  fi
   cat<<EOF | sq -html $db \
       | sed -e "s|\(<TR><TD>\),e,|\1 $href |" \
 	    -e "s|,s,\(</TD>\)|$href2$href3\1|"
@@ -191,7 +194,7 @@
   echo "</table>"
 
   
-  blog_writable $rowid $user && cat<<EOF
+  $iswritable && cat<<EOF
 <div class="blogcomment">
 <p>コメント記入</p>
 <input type="hidden" name="blogid" value="$id">
@@ -208,6 +211,9 @@
 
 lshandout() {
   # $1=rowid of blog
+  if ! blog_writable $1 $user; then
+    echo "メンバー以外は利用できません。" | html p; return
+  fi
   time=`getvalbyid blog ctime $1|colrm 11`
   owner=`getvalbyid blog owner $1`
   title=`getvalbyid blog title $1`
@@ -251,6 +257,9 @@
 }
 gethandout() {
   # $1=rowid of blog
+  if ! blog_writable $1 $user; then
+    echo "メンバー以外は利用できません。" | html p; return
+  fi
   i=0
   bd=$tmpd/archive.$$
   mkdir $bd