Don't fetch the course just to find out if the user has access to it.