.
This commit is contained in:
+3
-2
@@ -2084,8 +2084,9 @@ class ExamViews(View, LoginRequiredMixin):
|
||||
|
||||
def exam_scores_user_supervisor(self, request, pk, user_id):
|
||||
user = User.objects.get(id=user_id)
|
||||
if not request.user.supervisor == user.userprofile.supervisor:
|
||||
raise PermissionDenied
|
||||
if not request.user.is_superuser:
|
||||
if not request.user.supervisor == user.userprofile.supervisor:
|
||||
raise PermissionDenied
|
||||
|
||||
return self.exam_scores_cid_user(request, pk, user=user, supervisor=request.user)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user