item.routes: Allow requiring valid sesion when polling document view …

…info

Fixes a bug where goto-link reports missing rights when a student actually does not have a valid session.

timApp/item/routes.py

@@ -290,17 +290,17 @@ def par_info(doc_id, par_id):
 
 
 @view_page.get("/docViewInfo/<path:doc_name>")
-def doc_access_info(doc_name):
+def doc_access_info(doc_name: str, require_valid_session: bool = True):
     doc_info = DocEntry.find_by_path(doc_name, fallback_to_id=True)
     if not doc_info:
         raise NotExist()
 
     cur_user = get_current_user_object()
     user_message = get_user_global_message(cur_user)
 
-    # If there is no valid session, just send out the global message
+    # If there is no valid session, but we don't require one, just send out the global message
     # This allows sending global messages even if there is no valid session
-    if not has_valid_session(cur_user):
+    if not require_valid_session and not has_valid_session(cur_user):
         return json_response(
             {
                 "can_access": False,

timApp/static/scripts/tim/document/viewctrl.ts

@@ -474,7 +474,11 @@ export class ViewCtrl implements IController {
         // Check against statePollInterval to allow stopping the polling
         while (this.docViewInfoPollInterval) {
             const r = await to(
-                $http.get<IDocumentViewInfoStatus>(`/docViewInfo/${docPath}`)
+                $http.get<IDocumentViewInfoStatus>(`/docViewInfo/${docPath}`, {
+                    params: {
+                        require_valid_session: false,
+                    },
+                })
             );
 
             if (r.ok) {