Index: openacs-4/packages/assessment/www/session.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/assessment/www/session.tcl,v
diff -u -r1.31 -r1.32
--- openacs-4/packages/assessment/www/session.tcl	18 Jan 2005 12:42:37 -0000	1.31
+++ openacs-4/packages/assessment/www/session.tcl	24 Jan 2005 14:54:31 -0000	1.32
@@ -7,11 +7,11 @@
     @cvs-id $Id: 
 } {
     session_id:integer
+} -properties {
+    context_bar:onevalue
+    page_title:onevalue
 }
 
-set context [list "[_ assessment.View_Results]"]
-set format "[lc_get formbuilder_date_format], [lc_get formbuilder_time_format]"
-
 db_1row find_assessment {}
 
 # Get the assessment data
@@ -22,6 +22,14 @@
     ad_script_abort
 }
 
+set user_id [ad_conn user_id]
+if {$subject_id != $user_id} {
+    permission::require_permission -object_id $assessment_id -privilege admin
+}
+
+set page_title "[_ assessment.View_Results]"
+set context_bar [ad_context_bar [list [export_vars -base sessions {assessment_id}] "[_ assessment.Show_Sessions]"] $page_title]
+set format "[lc_get formbuilder_date_format], [lc_get formbuilder_time_format]"
 set session_user_url [acs_community_member_url -user_id $subject_id]
 
 # get start and end times
@@ -30,6 +38,12 @@
 # get the number of attempts
 set session_attempt [db_string session_attempt {}]
 
+set show_username_p 1
+# only admins are allowed to see responses of other users
+if {$assessment_data(anonymous_p) == "t" && $subject_id != $user_id} {
+    set show_username_p 0
+}
+
 if {[empty_string_p $assessment_data(show_feedback)]} {
     set assessment_data(show_feedback) "all"
 }