From e18db9c1afd0f3ca5f7f3bc2d0e8039c4a15f5d3 Mon Sep 17 00:00:00 2001 From: Ross Date: Thu, 22 Apr 2021 13:39:38 +0100 Subject: [PATCH] . --- anatomy/views.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/anatomy/views.py b/anatomy/views.py index fa5a2f32..61b4e069 100644 --- a/anatomy/views.py +++ b/anatomy/views.py @@ -96,6 +96,9 @@ def question_list(request): def question_detail(request, pk): question = get_object_or_404(AnatomyQuestion, pk=pk) + if not question.open_access and not self.request.user.groups.filter(name="anatomy_checker").exists() : + raise PermissionDenied() + return render(request, "anatomy/question_detail.html", {"question": question})