Remove filter options section from user view template and update permission checks in toggle function

generic/templates/generic/user_view.html

@@ -8,19 +8,6 @@
 {% block content %}
     <a href='{% url "trainees" %}'>Trainees list</a>
 
-    <div id="view-filter-options">
-        <details class="filter">
-            <summary>
-                <h3>Filter Users </h3>
-            </summary>
-            <form action="" method="get">
-                {{ filter.form| crispy }}
-                <input class="btn btn-primary btn-sm mt-1 mb-1" type="submit" />
-            </form>
-        </details>
-    </div>
-
-
     <details class="bulk-edit">
         <summary>
             Bulk edit

sbas/views.py

@@ -669,8 +669,12 @@ def toggle_frcr_appropriate(request, pk):
     question = get_object_or_404(Question, pk=pk)
 
     # Simple permission: allow staff or users with change permission
-    if not (request.user.is_staff or request.user.has_perm('sbas.change_question')):
-        return HttpResponseForbidden("Forbidden")
+    if question.is_author(request.user):
+        pass
+    elif request.user.groups.filter(name="sba_reviewer").exists():
+        pass
+    elif not (request.user.is_staff or request.user.has_perm('sbas.change_question')):
+        return HttpResponse("Forbidden")
 
     # Toggle or set
     if request.method == "POST":