diff --git a/generic/views.py b/generic/views.py
index 63022676..5411bc1e 100644
--- a/generic/views.py
+++ b/generic/views.py
@@ -2088,7 +2088,7 @@ class ExamViews(View, LoginRequiredMixin):
             if not request.user.supervisor == user.userprofile.supervisor:
                 raise PermissionDenied
 
-        return self.exam_scores_cid_user(request, pk, user=user, supervisor=request.user)
+        return self.exam_scores_cid_user(request, pk, user=user, supervisor=user.userprofile.supervisor.user)
 
     @method_decorator(user_passes_test(lambda u: u.is_superuser))
     def exam_scores_cid_user_admin(self, request, pk, cid):