Add permission check for user marker access in mark2 overview
This commit is contained in:
@@ -786,6 +786,9 @@ def mark2_overview(request, pk):
|
|||||||
"""Overview page for mark2 workflow: lists questions and unmarked counts and links into mark2."""
|
"""Overview page for mark2 workflow: lists questions and unmarked counts and links into mark2."""
|
||||||
exam = get_object_or_404(Exam, pk=pk)
|
exam = get_object_or_404(Exam, pk=pk)
|
||||||
|
|
||||||
|
if not GenericExamViews.check_user_marker_access(request.user, pk):
|
||||||
|
raise PermissionDenied
|
||||||
|
|
||||||
if not exam.exam_mode:
|
if not exam.exam_mode:
|
||||||
raise Http404("Packet not in exam mode")
|
raise Http404("Packet not in exam mode")
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user