add course checks for permissions