From cd479caa7883bfcecddafd97edd2a005643bccbe Mon Sep 17 00:00:00 2001
From: Diana Huang <dkh@edx.org>
Date: Fri, 30 Aug 2013 13:58:36 -0400
Subject: [PATCH] Make sure users are logged in on the verified cert path

---
 common/djangoapps/course_modes/views.py | 2 +-
 lms/djangoapps/verify_student/views.py  | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/common/djangoapps/course_modes/views.py b/common/djangoapps/course_modes/views.py
index 2b4d77544a..fcf1721d52 100644
--- a/common/djangoapps/course_modes/views.py
+++ b/common/djangoapps/course_modes/views.py
@@ -36,7 +36,7 @@ class ChooseModeView(View):
 
         return render_to_response("course_modes/choose.html", context)
 
-
+    @method_decorator(login_required)
     def post(self, request, course_id):
         user = request.user
 
diff --git a/lms/djangoapps/verify_student/views.py b/lms/djangoapps/verify_student/views.py
index d8788b5c41..9abcc16a32 100644
--- a/lms/djangoapps/verify_student/views.py
+++ b/lms/djangoapps/verify_student/views.py
@@ -13,6 +13,7 @@ from django.core.urlresolvers import reverse
 from django.http import HttpResponse, HttpResponseBadRequest, HttpResponseRedirect
 from django.shortcuts import redirect
 from django.views.generic.base import View
+from django.utils.decorators import method_decorator
 from django.utils.translation import ugettext as _
 from django.utils.http import urlencode
 from django.contrib.auth.decorators import login_required
@@ -30,6 +31,7 @@ log = logging.getLogger(__name__)
 
 class VerifyView(View):
 
+    @method_decorator(login_required)
     def get(self, request, course_id):
         """
         """
@@ -73,6 +75,7 @@ class VerifiedView(View):
     View that gets shown once the user has already gone through the
     verification flow
     """
+    @method_decorator(login_required)
     def get(self, request, course_id):
         """
         Handle the case where we have a get request
@@ -93,6 +96,7 @@ class VerifiedView(View):
         return render_to_response('verify_student/verified.html', context)
 
 
+@login_required
 def create_order(request):
     """
     Submit PhotoVerification and create a new Order for this verified cert