From d7d5e13b224e4a33eafb8d8ec04b0ec1f7df96ea Mon Sep 17 00:00:00 2001
From: Ross <xkjq@ymail.com>
Date: Mon, 18 Apr 2022 18:19:38 +0100
Subject: [PATCH] .

---
 generic/templates/generic/cid_view.html | 2 +-
 generic/views.py                        | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/generic/templates/generic/cid_view.html b/generic/templates/generic/cid_view.html
index 49bcb63c..cd35bd74 100644
--- a/generic/templates/generic/cid_view.html
+++ b/generic/templates/generic/cid_view.html
@@ -31,7 +31,7 @@
         <button id="deactivate-selected-cids">Deactivate selected</button>
         <button id="delete-selected-cids">Delete selected</button>
         <button id="toggle-internal">Toggle internal</button>
-        <p>Select exams below to add user to.</p>
+        <p>Select exams below to add user(s) to (or edit existing user(s)).</p>
         <div class="exam-selectors">
             <span>
                 Physics Exams<br />
diff --git a/generic/views.py b/generic/views.py
index b27d655f..bb3918cf 100644
--- a/generic/views.py
+++ b/generic/views.py
@@ -1556,6 +1556,9 @@ def manage_cid_users(request):
             return JsonResponse({"status": "success"})
 
         if delete == "true":
+            if not request.user.is_superuser:
+                return JsonResponse({"status": "fail"})
+
             cids = CidUser.objects.filter(pk__in=selected_cids).delete()
             return JsonResponse({"status": "success"})