diff --git a/aleksis/apps/alsijil/rules.py b/aleksis/apps/alsijil/rules.py index f36db7aa5a3b532d2b143c109c7daf089391c96a..ad4536adc2444b52f700a30d4d8027280d4c99e2 100644 --- a/aleksis/apps/alsijil/rules.py +++ b/aleksis/apps/alsijil/rules.py @@ -241,13 +241,19 @@ add_perm("alsijil.delete_grouprole", delete_group_role_predicate) view_assigned_group_roles_predicate = ( is_group_owner - | is_lesson_teacher - | is_lesson_parent_group_owner | has_global_perm("alsjil.assign_grouprole") - | has_object_perm("alsijil.assign_grouprole") + | has_object_perm("core.assign_grouprole") ) add_perm("alsijil.view_assigned_grouproles", view_assigned_group_roles_predicate) +view_assigned_group_roles_register_object_predicate = ( + is_lesson_teacher | is_lesson_parent_group_owner | has_global_perm("alsjil.assign_grouprole") +) +add_perm( + "alsijil.view_assigned_grouproles_for_register_object", + view_assigned_group_roles_register_object_predicate, +) + assign_group_role_person_predicate = is_person_group_owner | has_global_perm( "alsjil.assign_grouprole" ) diff --git a/aleksis/apps/alsijil/views.py b/aleksis/apps/alsijil/views.py index 75c07ebec88e168db018850283d8abf216553e62..f3990be4fc351f55607a83a014d7d0cfacf3504e 100644 --- a/aleksis/apps/alsijil/views.py +++ b/aleksis/apps/alsijil/views.py @@ -167,7 +167,9 @@ def register_object( # Group roles show_group_roles = request.user.person.preferences[ "alsijil__group_roles_in_lesson_view" - ] and request.user.has_perm("alsijil.view_assigned_grouproles", register_object) + ] and request.user.has_perm( + "alsijil.view_assigned_grouproles_for_register_object", register_object + ) if show_group_roles: groups = register_object.get_groups().all() group_roles = GroupRole.objects.with_assignments(date_of_lesson, groups)