@dmitchell Where does this code make sure that request.user has the "staff" role and/or the "instructor" role?