YACOSWeb/src/org/yacos/web/PCmember/controller/EvaluationController.java

@@ -75,16 +75,33 @@ public class EvaluationController  extends SimpleFormController {
 	protected Object formBackingObject(HttpServletRequest request)
 	throws Exception {
 
+		
 		Conference conf = SessionService.getInstance().getCurrentConference();
+		String memberId = SessionService.getInstance().getCurrentUserLogin();
+		
+		
 		List<Criterion> criterionList =	evaluationManager.getCriterions(conf.getId());
 		String articleId = request.getParameter("id");
 		String action = request.getParameter("action");
+		boolean haveArticle = false;
+		List<Article> listarticles = articleManager.getArticlesOfMember(conf.getId(), memberId);
+		for (Article article : listarticles) {
+			if(article.getId() == Integer.parseInt(articleId)){
+				haveArticle = true;
+			}
+		}
 		
+		if(!haveArticle){
+			throw new ModelAndViewDefiningException(new ModelAndView("denied"));
+		}
 		// TODO : verifier que le gars a le droit d'evaluer cette article
 		// TODO : s'il existe deja une al, mais que l'action est pas modify, virer le gars
 
 		if (action == null || action.equals("")) {
-
+			Report report = evaluationManager.getReportforArticleAndReferee(Integer.parseInt(articleId), memberId);
+			if(report != null){
+				throw new ModelAndViewDefiningException(new ModelAndView("denied"));
+			}
 			try {
 				Integer id = new Integer(articleId);
 				Article a = articleManager.getArticle(id);