Index: openacs-4/packages/assessment/www/session.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/assessment/www/session.tcl,v
diff -u -r1.39 -r1.40
--- openacs-4/packages/assessment/www/session.tcl	21 Jan 2008 20:25:35 -0000	1.39
+++ openacs-4/packages/assessment/www/session.tcl	1 Dec 2008 16:57:02 -0000	1.40
@@ -6,15 +6,39 @@
      @date   2004-12-24
      @cvs-id $Id: 
  } {
+    {session_id:integer 0}
+    {assessment_id:integer 0}
+    {next_url ""}
  } -properties {
-     context_bar:onevalue
+     context:onevalue
      page_title:onevalue
  }
 
+set user_id [ad_conn user_id]
 
- set page_title "[_ assessment.View_Results]"
- set context_bar [ad_context_bar [list [export_vars -base sessions {assessment_id}] "[_ assessment.Show_Sessions]"] $page_title]
+if {$session_id == 0} {
+    # require assessment_id if session_id is blank
+    if {$assessment_id == 0} {
+	ad_return_complaint 1 "Session_id or Assessment_id is required"
+    }
+    #find the latest session
+    if {![db_0or1row get_latest_session "" -column_array latest_session]} {
+	ad_return_complaint 1 "You have not completed this assessment yet."
+    }
+    set session_id $latest_session(session_id)
+}
 
+db_1row find_assessment {}
+
+permission::require_permission -object_id $assessment_id -privilege read
+
+if {$subject_id != $user_id} {
+    permission::require_permission -object_id $assessment_id -privilege admin
+}
+
+set page_title "[_ assessment.View_Results]"
+set context [list [list [export_vars -base sessions {assessment_id}] "[_ assessment.Show_Sessions]"] $page_title]
+
 template::head::add_css -href "/resources/assessment/assessment.css"
 
 ad_return_template