issue #949 fixed

sails/src/api/controllers/StudentController.js

@@ -144,7 +144,9 @@ module.exports = {
       else if (stu_sup && !req.token.office)
       else if (stu_sup && !req.token.office)
         student.supervision = 1; // requester is tutor of the studend
         student.supervision = 1; // requester is tutor of the studend
       else if (stu_sup && req.token.office && student.office == req.token.office.id)
       else if (stu_sup && req.token.office && student.office == req.token.office.id)
-        student.supervision = 2; // requester is supervisor of student
+          student.supervision = 2; // requester is supervisor of student
+	else if (req.token.isStudent && req.token.id == student.id)
+	    student.supervision = 3 // requester is the student himself
 
 
       if (student.supervision == -1) // should not hace access!!!
       if (student.supervision == -1) // should not hace access!!!
         return res.forbidden("Access to this student should not be granted to you");
         return res.forbidden("Access to this student should not be granted to you");

sails/src/config/policies.js

@@ -86,7 +86,7 @@ module.exports.policies = {
 
 
   StudentController: {
   StudentController: {
     eternal: true,
     eternal: true,
-    getInfo: ['tokenAuth', 'isSupervisorOfStudentOrIsSupAdmin'],
+    getInfo: ['tokenAuth', 'isSupervisorOfStudentOrIsSupAdminOrIsStudent'],
     supervisors: ['tokenAuth'],
     supervisors: ['tokenAuth'],
     therapists: ['tokenAuth'],
     therapists: ['tokenAuth'],
     tutors: ['tokenAuth'],
     tutors: ['tokenAuth'],