diff --git a/apps/course/views.py b/apps/course/views.py index be890e4c..d55097f7 100644 --- a/apps/course/views.py +++ b/apps/course/views.py @@ -167,7 +167,7 @@ class CourseEditView(TemplateView): self.object = Course.objects.create( author=request.user, ) - if request.user != self.object.author and request.user.role < User.AUTHOR_ROLE: + if (request.user != self.object.author and request.user.role < User.AUTHOR_ROLE) or request.user.role != User.ADMIN_ROLE: raise Http404 return super().get(request) @@ -289,9 +289,9 @@ class LessonView(DetailView): def get(self, request, *args, **kwargs): response = super().get(request, *args, **kwargs) - if (self.object.course.status != Course.PUBLISHED and - (request.user.role < User.AUTHOR_ROLE or - self.object.course.author != request.user)): + if (self.object.course.status != Course.PUBLISHED and not + (request.user.role == User.ADMIN_ROLE or + self.object.course.author == request.user)): raise Http404 return response