From 5063460e5a03b84293c9884dd4e9d3f3d47b29f1 Mon Sep 17 00:00:00 2001
From: Ross <xkjq@ymail.com>
Date: Tue, 31 Aug 2021 22:44:46 +0100
Subject: [PATCH] .

---
 generic/views.py                         | 4 +++-
 longs/templates/longs/exam_overview.html | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/generic/views.py b/generic/views.py
index 1e22572d..f9ff7899 100644
--- a/generic/views.py
+++ b/generic/views.py
@@ -283,6 +283,8 @@ class ExamViews(View, LoginRequiredMixin):
         if request.user not in exam.author.all():
             if not self.check_user_access(request.user):
                 raise PermissionDenied
+        
+        can_edit = self.check_user_edit_access(request.user)
 
         questions = exam.exam_questions.all()
 
@@ -291,7 +293,7 @@ class ExamViews(View, LoginRequiredMixin):
         return render(
             request,
             "{}/exam_overview.html".format(self.app_name),
-            {"exam": exam, "questions": questions, "question_number": question_number},
+            {"exam": exam, "questions": questions, "question_number": question_number, "can_edit": can_edit},
         )
 
     @method_decorator(login_required)
diff --git a/longs/templates/longs/exam_overview.html b/longs/templates/longs/exam_overview.html
index 36d5684a..c99b2816 100644
--- a/longs/templates/longs/exam_overview.html
+++ b/longs/templates/longs/exam_overview.html
@@ -63,6 +63,9 @@
         {{ author }},
         {% endfor %}
     </div>
+    
+    {% if can_edit %}
+        
     <p><button id='button-edit-order'>Edit exam order</button></p>
     <div>
         JSON creation time: {{exam.json_creation_time}} ({{exam.json_creation_time|date:"c"}}),
@@ -75,6 +78,7 @@
 
     <button id='button-open-access'>Make questions open access</button>
     <button id='button-closed-access'>Make questions closed access</button>
+    {% endif %}
 
 </div>
 <script type="text/javascript">