Add permission check for user marker access in mark2 overview

2026-01-05 10:18:41 +00:00
parent 71dc50b307
commit 086bd8f589
1 changed files with 3 additions and 0 deletions
@@ -786,6 +786,9 @@ def mark2_overview(request, pk):
    """Overview page for mark2 workflow: lists questions and unmarked counts and links into mark2."""
    exam = get_object_or_404(Exam, pk=pk)

+    if not GenericExamViews.check_user_marker_access(request.user, pk):
+        raise PermissionDenied
+
    if not exam.exam_mode:
        raise Http404("Packet not in exam mode")