.

longs/decorators.py

@@ -11,3 +11,13 @@ def user_is_author_or_long_checker(function):
     wrap.__doc__ = function.__doc__
     wrap.__name__ = function.__name__
     return wrap
+
+def user_is_long_checker(function):
+    def wrap(request, *args, **kwargs):
+        if request.user.groups.filter(name='long_checker').exists() or request.user.is_superuser:
+            return function(request, *args, **kwargs)
+        else:
+            raise PermissionDenied
+    wrap.__doc__ = function.__doc__
+    wrap.__name__ = function.__name__
+    return wrap

longs/views.py

@@ -39,7 +39,7 @@ from .filters import LongFilter, LongSeriesFilter
 from django_tables2 import SingleTableView, SingleTableMixin
 from django_filters.views import FilterView
 
-from .decorators import user_is_author_or_long_checker
+from .decorators import user_is_author_or_long_checker, user_is_long_checker
 
 from collections import defaultdict
 import json
@@ -631,7 +631,7 @@ def loadJsonAnswer(answer):
 
 
 @login_required
-#@user_is_author_or_long_checker
+@user_is_long_checker
 def mark_answer(request, pk, sk, tk):
     exam = get_object_or_404(Exam, pk=pk)
 
@@ -700,7 +700,7 @@ def mark_answer(request, pk, sk, tk):
 
 # @user_passes_test(user_is_admin, login_url="/accounts/login")
 @login_required
-#@user_is_author_or_long_checker
+@user_is_long_checker
 def mark(request, pk, sk):
     exam = get_object_or_404(Exam, pk=pk)
 
@@ -734,7 +734,7 @@ def mark(request, pk, sk):
 
 
 @login_required
-@user_is_author_or_long_checker
+@user_is_long_checker
 def exam_scores_cid(request, pk):
     exam = get_object_or_404(Exam, pk=pk)