added in getAllExercises for ex-mgmt, block unauthorized lesson creation access