permission checking in promote student view