From c17588912f6714970432b05371dee629ce79d526 Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Mon, 13 May 2019 15:48:38 +0200 Subject: [PATCH] Fix data leak in CCommR --- src/Handler/Course.hs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/Handler/Course.hs b/src/Handler/Course.hs index 5d2762eb2..dabc8c9d3 100644 --- a/src/Handler/Course.hs +++ b/src/Handler/Course.hs @@ -1408,6 +1408,7 @@ postCCommR tid ssh csh = do E.where_ $ E.exists $ E.from $ \(sheet `E.InnerJoin` corrector) -> do E.on $ sheet E.^. SheetId E.==. corrector E.^. SheetCorrectorSheet E.where_ $ sheet E.^. SheetCourse E.==. E.val cid + E.&&. user E.^. UserId E.==. corrector E.^. SheetCorrectorUser return user ) , ( RGCourseTutors @@ -1415,6 +1416,7 @@ postCCommR tid ssh csh = do E.where_ $ E.exists $ E.from $ \(tutorial `E.InnerJoin` tutor) -> do E.on $ tutorial E.^. TutorialId E.==. tutor E.^. TutorTutorial E.where_ $ tutorial E.^. TutorialCourse E.==. E.val cid + E.&&. user E.^. UserId E.==. tutor E.^. TutorUser return user ) ]