Reruns/cms server side LMS-11016

This PR is an updated version of this old one: https://github.com/edx/edx-platform/pull/4573
`has_course_access` does this check as well, so I don't know why we need to do this separately.