.

generic/views.py

@@ -66,6 +66,15 @@ import plotly.express as px
 from django.db.models import Prefetch
 
 
+class CidManagerRequiredMixin(object):
+    def get_object(self, *args, **kwargs):
+        obj = super().get_object(*args, **kwargs)
+        if self.request.user.groups.filter(name="cid_user_manager").exists():
+            return obj
+        if self.request.user not in obj.author.all():
+            raise PermissionDenied()  # or Http404
+        return obj
+
 def normaliseRapidsScore(score):
     if score == 49:
         return 4.5
@@ -1264,7 +1273,7 @@ class ExaminationAutocomplete(autocomplete.Select2QuerySetView):
         return qs
 
 
-class CidUserView(LoginRequiredMixin, SingleTableMixin, FilterView):
+class CidUserView(CidManagerRequiredMixin, SingleTableMixin, FilterView):
     model = CidUser
     table_class = CidUserTable
     template_name = "generic/cid_view.html"