From 086bd8f5890a552830ca59321bbc17c1633bc096 Mon Sep 17 00:00:00 2001 From: Ross Date: Mon, 5 Jan 2026 10:18:41 +0000 Subject: [PATCH] Add permission check for user marker access in mark2 overview --- anatomy/views.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/anatomy/views.py b/anatomy/views.py index 268478b8..388dd9b9 100644 --- a/anatomy/views.py +++ b/anatomy/views.py @@ -786,6 +786,9 @@ def mark2_overview(request, pk): """Overview page for mark2 workflow: lists questions and unmarked counts and links into mark2.""" exam = get_object_or_404(Exam, pk=pk) + if not GenericExamViews.check_user_marker_access(request.user, pk): + raise PermissionDenied + if not exam.exam_mode: raise Http404("Packet not in exam mode")