chore: i forgor 💀

SELab-2 · May 24, 2024 · b5e73d2 · b5e73d2
1 parent 4015c4e
commit b5e73d2
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/backend/api/permissions/submission_permissions.py b/backend/api/permissions/submission_permissions.py
@@ -41,8 +41,14 @@ class SubmissionFeedbackPermission(SubmissionPermission):
     def has_permission(self, request: Request, view: APIView) -> bool:
         return True
 
-    def has_object_permission(self, request: Request, view: APIView, obj: Submission) -> bool:
-        return True
+    def has_object_permission(self, request: Request, view: APIView, submission: Submission) -> bool:
+        if is_student(request.user) and submission.group.students.contains(request.user):
+            return True
+
+        if is_teacher(request.user) or is_assistant(request.user):
+            return True
+
+        return False
 
 
 class StructureCheckResultPermission(SubmissionPermission):