Requesting exercise via API returns result of all exercises of an exam instead of returning only the result of the exercise requested with its unique id

[niels-beier]

If you request an exercise via the API (https://muesli.mathi.uni-heidelberg.de/api/v1/exercises/"exercise-id"/"user-id"/) you get a list of all exercise results of an exam instead of only getting the exercise results of the exercise with its unique id mentioned in the request url.

[christian-heusel]

Can confirm the issue! Unfortunately due to a problem with my development setup I currently am not able to fix the issue.
If you want to, you can have a look at the code:

muesli/muesli/web/api/v1/exerciseEndpoint.py

Lines 78 to 104 in f6981e5

	@view(permission='viewOwn')
	def get(self):
	"""
	---
	get:
	security:
	- Bearer: [read]
	- Basic: [read]
	tags:
	- "v1"
	summary: "return an exercise for given student"
	description: ""
	operationId: "exercise_student_get"
	produces:
	- "application/json"
	responses:
	200:
	description: successfull return of the exercise
	schema:
	$ref: "#/definitions/ExerciseStudent"
	"""
	exercise = self.request.context.exercise
	user = self.request.context.user
	exer_students = exercise.exam.exercise_points.filter(models.ExerciseStudent.student_id == user.id)
	exer_student_schema = models.ExerciseStudentSchema(many=True)
	result = exer_student_schema.dump(exer_students)
	return result

[niels-beier]

I think this happens because the exercise_points are only filtered by the id of the user. Since all exercises of the exam should have entries for the given user and its ID all exercises are filtered out.
I think a fix would be to add another filter like this:

exer_students = exercise.exam.exercise_points.filter(models.ExerciseStudent.student_id == user.id).filter(models.Exam.id == exercise.id)

This should filter the exercise points of the given user by the ID of the given exercise.