diff --git a/generic/templates/generic/user_view.html b/generic/templates/generic/user_view.html
index 490aaf77..6819f31c 100644
--- a/generic/templates/generic/user_view.html
+++ b/generic/templates/generic/user_view.html
@@ -8,19 +8,6 @@
{% block content %}
Trainees list
-
-
-
- Filter Users
-
-
-
-
-
-
Bulk edit
diff --git a/sbas/views.py b/sbas/views.py
index 8b901246..cddea9ce 100644
--- a/sbas/views.py
+++ b/sbas/views.py
@@ -669,8 +669,12 @@ def toggle_frcr_appropriate(request, pk):
question = get_object_or_404(Question, pk=pk)
# Simple permission: allow staff or users with change permission
- if not (request.user.is_staff or request.user.has_perm('sbas.change_question')):
- return HttpResponseForbidden("Forbidden")
+ if question.is_author(request.user):
+ pass
+ elif request.user.groups.filter(name="sba_reviewer").exists():
+ pass
+ elif not (request.user.is_staff or request.user.has_perm('sbas.change_question')):
+ return HttpResponse("Forbidden")
# Toggle or set
if request.method == "POST":