.

2022-01-07 12:01:15 +00:00
parent 27ad809bf1
commit f9c57de929
1 changed files with 3 additions and 1 deletions
@@ -559,10 +559,12 @@ class ExamViews(View, LoginRequiredMixin):
            },
        )

-    @method_decorator(user_is_cid_user_manager)
    def exam_cids(self, request, exam_id):
        exam = get_object_or_404(self.Exam, pk=exam_id)

+        if not request.user.groups.filter(name="cid_user_manager").exists():
+            raise PermissionDenied
+
        if request.user not in exam.author.all():
            if not self.check_user_access(request.user, exam_id):
                raise PermissionDenied