From 013009ea244cc6f9ebf7e3ca44b4bf3e5653d3bd Mon Sep 17 00:00:00 2001 From: David Ormsbee Date: Mon, 19 Aug 2013 17:27:23 -0400 Subject: [PATCH] Let staff have access to a forum even if they're not enrolled in the course. --- lms/djangoapps/django_comment_client/forum/views.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lms/djangoapps/django_comment_client/forum/views.py b/lms/djangoapps/django_comment_client/forum/views.py index aeaa763280..1d4bb033f6 100644 --- a/lms/djangoapps/django_comment_client/forum/views.py +++ b/lms/djangoapps/django_comment_client/forum/views.py @@ -169,7 +169,8 @@ def forum_form_discussion(request, course_id): """ Renders the main Discussion page, potentially filtered by a search query """ - if not CourseEnrollment.is_enrolled(request.user, course_id): + if not CourseEnrollment.is_enrolled(request.user, course_id) and \ + not has_access(request.user, course_id, 'staff'): access_violation_msg = "Unenrolled user {} tried to access forum for {}" log.warning(access_violation_msg.format(request.user, course_id)) raise Http404