Merge pull request #1899 from T-CAIREM/au/event/fix/limit_edit_event_…

…to_event_host_who_created_event

limit update event to the event host(Instructor) who created the event

physionet-django/events/views.py

@@ -21,9 +21,12 @@ def update_event(request, event_slug, **kwargs):
     if request.method == 'POST':
         event = Event.objects.get(slug=event_slug)
         event_form = AddEventForm(user=user, data=request.POST, instance=event)
-        if event_form.is_valid() and can_change_event:
-            event_form.save()
-            messages.success(request, "Updated Event Successfully")
+        if event_form.is_valid():
+            if can_change_event and event.host == user:
+                event_form.save()
+                messages.success(request, "Updated Event Successfully")
+            else:
+                messages.error(request, "You don't have permission to edit this event")
         else:
             messages.error(request, event_form.errors)
     else: