Only get the donor informations if we load the target segment page as admin

views/afis/__init__.py

@@ -85,18 +85,24 @@ def show_folder_inner( uuid, admin ):
     """
     annotation_list = config.db.query_fetchall( sql, ( uuid, ) )
     
-    sql = """
-        SELECT
-            submissions.uuid,
-            cnm_folder.pc,
-            users.username
-        FROM cnm_folder
-        INNER JOIN submissions ON cnm_folder.donor_id = submissions.donor_id
-        INNER JOIN users ON cnm_folder.donor_id = users.id
-        WHERE cnm_folder.folder_uuid = %s
-    """
-    submission_id, pc, username = config.db.query_fetchone( sql, ( uuid, ) )
-    finger_name = "{} (F{})".format( segments_position_code[ pc ], pc )
+    if admin:
+        sql = """
+            SELECT
+                submissions.uuid,
+                cnm_folder.pc,
+                users.username
+            FROM cnm_folder
+            INNER JOIN submissions ON cnm_folder.donor_id = submissions.donor_id
+            INNER JOIN users ON cnm_folder.donor_id = users.id
+            WHERE cnm_folder.folder_uuid = %s
+        """
+        submission_id, pc, username = config.db.query_fetchone( sql, ( uuid, ) )
+        finger_name = "{} (F{})".format( segments_position_code[ pc ], pc )
+    
+    else:
+        submission_id = None
+        finger_name = None
+        username = None
     
     return my_render_template(
         "shared/segment.html",