unnecessarily fetches the course? (does check course start date which may be pertinent, but I don't think so). Delete 238 and replace 240 with `if not has_access(user, 'staff', course_id):`