.

rapids/templates/rapids/rapid_form.html

@@ -333,7 +333,10 @@
 {% block content %}
 <h2>Submit Rapid</h2>
 <a href="{% url 'rapids:rapid_create_defaults' %}">Edit defaults</a>
-Abnormality, Region and Laterality are used to categorise within the system (they are not used for marking). String answers that match those added below will be used for automatic marking. Multiple images can be added to a question. If the feedback image box is checked they will not be displayed when taking the question.
+<p>
+    <h3>Instructions</h3>
+    Abnormality, Region and Laterality are used to categorise within the system (they are not used for marking). String answers that match those added below will be used for automatic marking. Multiple images can be added to a question. If the feedback image box is checked they will not be displayed when taking the question.
+</p>
 <form action="" method="post" enctype="multipart/form-data" id="rapid-form">
     {% csrf_token %}
     <a href="/rapids/abnormality/create" id="add_abnormality" class="add-popup"
@@ -359,11 +362,11 @@ Abnormality, Region and Laterality are used to categorise within the system (the
     </div>
     {{ answer_formset.management_form }}
     <h3>Images:</h3>
-    <input type="button" value="Add More Images" id="add_more_images">
     <div id="drop-container" class="drop-target">Drop images here (or use the buttons below)<div
             id="feedback-drop-target">Feedback image?<br />drop those here</div>
         <div id="drop-filenames"></div>
     </div>
+    <input type="button" value="Add More Images" id="add_more_images">
     <div id="image_form_set">
         {% for form in image_formset %}
         <ul class="no-error image-formset">

rapids/views.py

@@ -92,7 +92,7 @@ class AuthorOrCheckerRequiredMixin(object):
 def question_detail(request, pk):
     rapid = get_object_or_404(Rapid, pk=pk)
 
-    if not request.user.groups.filter(name="rapid_checker").exists() and request.user not in question.author.all():
+    if not request.user.groups.filter(name="rapid_checker").exists() and request.user not in rapid.author.all():
         raise PermissionDenied()
     # if request.user not in rapid.author.all():
     #    raise PermissionDenied