Index: openacs-4/packages/assessment/www/assessment.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/assessment/www/Attic/assessment.tcl,v
diff -u -r1.35 -r1.36
--- openacs-4/packages/assessment/www/assessment.tcl	14 Feb 2005 17:14:40 -0000	1.35
+++ openacs-4/packages/assessment/www/assessment.tcl	21 Feb 2005 14:32:56 -0000	1.36
@@ -7,6 +7,7 @@
     @creation-date 2004-09-13
 } -query {
     assessment_id:integer,notnull
+    {password:optional ""}
     {session_id:integer,optional ""}
     {section_order:integer,optional ""}
     {item_order:integer,optional ""}
@@ -24,14 +25,15 @@
 set item_to ""
 # Get the assessment data
 as::assessment::data -assessment_id $assessment_id
+permission::require_permission -object_id $assessment_id -privilege read
 
 if {![info exists assessment_data(assessment_id)]} {
     ad_return_complaint 1 "[_ assessment.Requested_assess_does]"
     ad_script_abort
 }
 
 set assessment_rev_id $assessment_data(assessment_rev_id)
-set errors [as::assessment::check_session_conditions -assessment_id $assessment_rev_id -subject_id $user_id]
+set errors [as::assessment::check_session_conditions -assessment_id $assessment_rev_id -subject_id $user_id -password $password]
 if {![empty_string_p $errors]} {
     ad_return_complaint 1 $errors
     ad_script_abort
@@ -232,7 +234,7 @@
 
 
 # form for display an assessment with sections and items
-ad_form -name show_item_form -action assessment -html {enctype multipart/form-data} -export {assessment_id section_id section_order item_order} -form {
+ad_form -name show_item_form -action assessment -html {enctype multipart/form-data} -export {assessment_id section_id section_order item_order password} -form {
     {session_id:text(hidden) {value $session_id}}
 }
 
@@ -281,7 +283,7 @@
 	}
 	
 	# create seperate submit form for each item
-	ad_form -name show_item_form_$as_item_id -mode $mode -action assessment -html {enctype multipart/form-data} -export {assessment_id section_id section_order item_order} -form {
+	ad_form -name show_item_form_$as_item_id -mode $mode -action assessment -html {enctype multipart/form-data} -export {assessment_id section_id section_order item_order password} -form {
 	    {session_id:text(hidden) {value $session_id}}
 	    {item_id:text(hidden) {value $as_item_id}}
 	}