From de399166f1bcb31f9bd9874d6da872abfc66bef4 Mon Sep 17 00:00:00 2001
From: Jannat Patel <pateljannat2308@gmail.com>
Date: Tue, 28 Mar 2023 16:30:14 +0530
Subject: [PATCH] fix: only allow class students to see progress

---
 lms/www/classes/class.html | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lms/www/classes/class.html b/lms/www/classes/class.html
index 50270274..29ce41d4 100644
--- a/lms/www/classes/class.html
+++ b/lms/www/classes/class.html
@@ -143,7 +143,8 @@
 		</tr>
 		{% for student in class_students %}
 		{% set last_active = frappe.db.get_value("User", student.student, "last_active") %}
-		{% set allow_progress = is_moderator or student.student == frappe.session.user or frappe.db.get_single_value("LMS Settings", "allow_student_progress") %}
+		{% set allow_progress = is_moderator or student.student == frappe.session.user or (frappe.db.get_single_value("LMS Settings", "allow_student_progress") and
+		is_student) %}
 		<tr>
 			<td>
 				<a class="subheading button-links d-block" {% if allow_progress %} href="/classes/{{ class_info.name }}/students/{{ student.username }}" {% endif %}>