This commit is contained in:
Ross
2024-11-04 12:51:10 +00:00
parent a4c7aeb84d
commit 7c5cfae5d5
+3 -2
View File
@@ -2084,8 +2084,9 @@ class ExamViews(View, LoginRequiredMixin):
def exam_scores_user_supervisor(self, request, pk, user_id):
user = User.objects.get(id=user_id)
if not request.user.supervisor == user.userprofile.supervisor:
raise PermissionDenied
if not request.user.is_superuser:
if not request.user.supervisor == user.userprofile.supervisor:
raise PermissionDenied
return self.exam_scores_cid_user(request, pk, user=user, supervisor=request.user)