diff --git a/src/consents/tests/tests_consent_operations.py b/src/consents/tests/tests_consent_operations.py index efc7053d48b40a00a6e4baed5da2096ed429cbbb..e9be69bcaaed0c71ea5967ce96d8d26532541976 100644 --- a/src/consents/tests/tests_consent_operations.py +++ b/src/consents/tests/tests_consent_operations.py @@ -878,16 +878,18 @@ class TestUserConsentSaveUpdatedProviderSchema(BaseTestCase): ) self.assertEqual(response.status_code, 200) - user_consents = UserConsents.objects.filter(user__email=self.test_user_email) + user_consents = UserConsents.objects.filter(user__email=self.test_user_email, active=True) self.assertEqual(len(user_consents), 2) self.assertTrue( UserConsents.objects.get( - verb="http://h5p.example.com/expapi/verbs/experienced" + verb="http://h5p.example.com/expapi/verbs/experienced", + active=True ).consented ) self.assertTrue( UserConsents.objects.get( - verb="http://h5p.example.com/expapi/verbs/attempted" + verb="http://h5p.example.com/expapi/verbs/attempted", + active=True ).consented ) diff --git a/src/xapi/views.py b/src/xapi/views.py index b20a46c7f37dd8e19cae2859f72d3bbcf80c8548..515ecf5d65a6845a28909646aa2addb83a25a35b 100644 --- a/src/xapi/views.py +++ b/src/xapi/views.py @@ -195,7 +195,7 @@ def process_statement(x_api_statement, provider, latest_schema): # has the user given consent to this verb? # maybe TODO: load correct provider schema pertaining to this user consent to validate the verb and objects fully user_consent = UserConsents.objects.filter( - user=user, provider=provider, verb=verb, consented=True, created__lte=timestamp + user=user, provider=provider, verb=verb, consented=True, created__lte=timestamp, active=True ).first() if not user_consent: