.

generic/templates/generic/cid_view.html

@@ -31,7 +31,7 @@
         <button id="deactivate-selected-cids">Deactivate selected</button>
         <button id="delete-selected-cids">Delete selected</button>
         <button id="toggle-internal">Toggle internal</button>
-        <p>Select exams below to add user to.</p>
+        <p>Select exams below to add user(s) to (or edit existing user(s)).</p>
         <div class="exam-selectors">
             <span>
                 Physics Exams<br />

generic/views.py

@@ -1556,6 +1556,9 @@ def manage_cid_users(request):
             return JsonResponse({"status": "success"})
 
         if delete == "true":
+            if not request.user.is_superuser:
+                return JsonResponse({"status": "fail"})
+
             cids = CidUser.objects.filter(pk__in=selected_cids).delete()
             return JsonResponse({"status": "success"})