.

generic/decorators.py

@@ -0,0 +1,13 @@
+from django.core.exceptions import PermissionDenied
+from .models import Exam
+
+def user_is_exam_author_or_exam_checker(function):
+    def wrap(request, *args, **kwargs):
+        exam = Exam.objects.get(pk=kwargs['pk'])
+        if request.user in exam.author.all() or request.user.groups.filter(name='exam_checker').exists():
+            return function(request, *args, **kwargs)
+        else:
+            raise PermissionDenied
+    wrap.__doc__ = function.__doc__
+    wrap.__name__ = function.__name__
+    return wrap

generic/views.py

@@ -23,6 +23,8 @@ from .forms import (
     ExaminationForm,
 )
 
+from .decorators import user_is_exam_author_or_exam_checker
+
 from .models import Examination
 
 from rapids.models import Rapid as RapidQuestion
@@ -202,6 +204,7 @@ class ExamViews(View, LoginRequiredMixin):
 
 
     @method_decorator(login_required)
+    @method_decorator(user_is_exam_author_or_exam_checker)
     def exam_overview(self, request, pk):
         #print(Exam.objects.all())
         #exams = Exam.objects.all()

rapids/decorators.py

@@ -1,5 +1,5 @@
 from django.core.exceptions import PermissionDenied
-from .models import Rapid
+from .models import Exam
 
 def user_is_author_or_rapid_checker(function):
     def wrap(request, *args, **kwargs):
@@ -11,3 +11,15 @@ def user_is_author_or_rapid_checker(function):
     wrap.__doc__ = function.__doc__
     wrap.__name__ = function.__name__
     return wrap
+
+
+def user_is_exam_author_or_rapid_checker(function):
+    def wrap(request, *args, **kwargs):
+        exam = Exam.objects.get(pk=kwargs['pk'])
+        if request.user in exam.author.all() or request.user.groups.filter(name='rapid_checker').exists():
+            return function(request, *args, **kwargs)
+        else:
+            raise PermissionDenied
+    wrap.__doc__ = function.__doc__
+    wrap.__name__ = function.__name__
+    return wrap