Split course by teachers

app/main.py

@@ -323,16 +323,19 @@ class ClassroomManager(HFDatasetManager):
             else:
                 print("[ClassroomManager] Failed to save to HF, data saved locally only")
 
-    def get_courses(self):
+    def get_courses(self, creator_id=None):
+        if creator_id:
+            return [c for c in self.classrooms if c.get('creator_id') == creator_id]
         return self.classrooms
 
     def get_course(self, course_id):
         return next((c for c in self.classrooms if c['id'] == course_id), None)
 
-    def create_course(self, name):
+    def create_course(self, name, creator_id=None):
         course = {
             "id": str(uuid.uuid4()),
             "name": name,
+            "creator_id": creator_id,
             "students": []
         }
         self.classrooms.append(course)
@@ -1015,7 +1018,7 @@ def guia_gestion():
 @app.route('/classroom/dashboard')
 @login_required
 def classroom_dashboard():
-    courses = classroom_manager.get_courses()
+    courses = classroom_manager.get_courses(creator_id=current_user.id)
     return render_template('classroom_dashboard.html', title="Gestión de Aulas", courses=courses)
 
 @app.route('/classroom/create', methods=['POST'])
@@ -1023,7 +1026,7 @@ def classroom_dashboard():
 def create_course():
     name = request.form.get('name')
     if name:
-        classroom_manager.create_course(name)
+        classroom_manager.create_course(name, creator_id=current_user.id)
         flash('Curso creado exitosamente', 'green')
     else:
         flash('El nombre del curso es requerido', 'red')
@@ -1033,8 +1036,8 @@ def create_course():
 @login_required
 def course_details(course_id):
     course = classroom_manager.get_course(course_id)
-    if not course:
-        flash('Curso no encontrado', 'red')
+    if not course or course.get('creator_id') != current_user.id:
+        flash('Curso no encontrado o no tienes permiso para verlo', 'red')
         return redirect(url_for('classroom_dashboard'))
     return render_template('course_details.html', title=course['name'], course=course)
 
@@ -1077,7 +1080,12 @@ def delete_student(course_id, student_id):
 @app.route('/api/courses')
 def api_courses():
     """Devuelve la lista de cursos y sus estudiantes para el frontend."""
-    courses = classroom_manager.get_courses()
+    # Si el usuario está autenticado, solo mostramos sus cursos. 
+    # Si no, por ahora no mostramos ninguno para mantener la privacidad.
+    if current_user.is_authenticated:
+        courses = classroom_manager.get_courses(creator_id=current_user.id)
+    else:
+        courses = []
     return jsonify(courses)
 
 @app.route('/api/faces', methods=['GET', 'POST'])
@@ -1130,15 +1138,19 @@ class AttendancePDF(FPDF):
 @app.route('/export/attendance/<student_id>')
 @login_required
 def export_attendance(student_id):
+    # Buscar cursos del usuario actual para filtrar
+    my_courses = {c['id'] for c in classroom_manager.get_courses(creator_id=current_user.id)}
+
     # Buscar registros del estudiante
     all_logs = []
     if isinstance(face_mgr.faces, dict):
         all_logs = face_mgr.faces.get("attendance_log", [])
     
-    student_logs = [log for log in all_logs if log.get('student_id') == student_id]
+    # Filtrar logs: deben ser del estudiante Y de un curso que pertenezca al usuario actual
+    student_logs = [log for log in all_logs if log.get('student_id') == student_id and log.get('course_id') in my_courses]
     
     if not student_logs:
-        flash("No hay registros de asistencia para este estudiante.", "orange")
+        flash("No hay registros de asistencia para este estudiante en tus cursos.", "orange")
         return redirect(request.referrer or url_for('classroom_dashboard'))
 
     student_name = student_logs[0].get('student_name', 'Estudiante')