This commit is contained in:
Ross
2022-04-28 14:33:37 +01:00
parent 74e2afb6f4
commit 58d6bc4cb8
+3 -2
View File
@@ -607,8 +607,9 @@ class ExamViews(View, LoginRequiredMixin):
# raise PermissionDenied
if request.user not in exam.author.all():
if not self.check_user_access(request.user, exam_id):
raise PermissionDenied
if not request.user.is_superuser:
if not self.check_user_access(request.user, exam_id):
raise PermissionDenied
cid_users = exam.valid_users.all()