diff --git a/generic/templates/generic/user_view.html b/generic/templates/generic/user_view.html index 490aaf77..6819f31c 100644 --- a/generic/templates/generic/user_view.html +++ b/generic/templates/generic/user_view.html @@ -8,19 +8,6 @@ {% block content %} Trainees list -
-
- -

Filter Users

-
-
- {{ filter.form| crispy }} - -
-
-
- -
Bulk edit diff --git a/sbas/views.py b/sbas/views.py index 8b901246..cddea9ce 100644 --- a/sbas/views.py +++ b/sbas/views.py @@ -669,8 +669,12 @@ def toggle_frcr_appropriate(request, pk): question = get_object_or_404(Question, pk=pk) # Simple permission: allow staff or users with change permission - if not (request.user.is_staff or request.user.has_perm('sbas.change_question')): - return HttpResponseForbidden("Forbidden") + if question.is_author(request.user): + pass + elif request.user.groups.filter(name="sba_reviewer").exists(): + pass + elif not (request.user.is_staff or request.user.has_perm('sbas.change_question')): + return HttpResponse("Forbidden") # Toggle or set if request.method == "POST":