if not request.user.is_staff and not CourseEnrollment.is_enrolled...