.

2024-11-04 12:51:10 +00:00
parent a4c7aeb84d
commit 7c5cfae5d5
1 changed files with 3 additions and 2 deletions
@@ -2084,6 +2084,7 @@ class ExamViews(View, LoginRequiredMixin):

    def exam_scores_user_supervisor(self, request, pk, user_id):
        user = User.objects.get(id=user_id)
+        if not request.user.is_superuser:
            if not request.user.supervisor == user.userprofile.supervisor:
                raise PermissionDenied