From 65c733d66e808f32e71d90a5eb84796578241699 Mon Sep 17 00:00:00 2001
From: Vikrant Kumar <vikrantkrd@gmail.com>
Date: Sat, 18 Jul 2026 13:28:37 +0530
Subject: [PATCH] Examination: let acadadmin submit grades for any course

- SubmitGradesProfAPI: acadadmin's course list is registration-based
  (session + semester_type) instead of gated by CourseInstructor, so
  courses with no assigned faculty (e.g. project/BTP courses) appear
- UploadGradesProfAPI: acadadmin bypasses the instructor-ownership check;
  faculty remain scoped to courses they are assigned to teach
---
 .../applications/examination/api/views.py     | 38 ++++++++++---------
 1 file changed, 21 insertions(+), 17 deletions(-)

diff --git a/FusionIIIT/applications/examination/api/views.py b/FusionIIIT/applications/examination/api/views.py
index 808ad10d4..36c9ea863 100644
--- a/FusionIIIT/applications/examination/api/views.py
+++ b/FusionIIIT/applications/examination/api/views.py
@@ -1729,21 +1729,25 @@ def post(self, request):
         
         working_year, _ = parse_academic_year(academic_year=academic_year, semester_type=semester_type)
 
-        instructor_filter = {"year": working_year, "semester_type": semester_type}
-        if not user_holds_role(request.user, "acadadmin"):
-            instructor_filter["instructor_id_id"] = request.user.username
-
-        unique_course_ids = (
-            CourseInstructor.objects.filter(**instructor_filter)
-            .values("course_id_id")
-            .distinct()
-            .annotate(course_id_int=Cast("course_id_id", IntegerField()))
-        )
-
-        # Retrieve course details with programme type filtering
-        courses_query = Courses.objects.filter(
-            id__in=unique_course_ids.values_list("course_id_int", flat=True)
-        )
+        if user_holds_role(request.user, "acadadmin"):
+            course_ids = (
+                course_registration.objects
+                .filter(session=academic_year, semester_type=semester_type)
+                .values_list("course_id", flat=True)
+                .distinct()
+            )
+            courses_query = Courses.objects.filter(id__in=course_ids)
+        else:
+            unique_course_ids = (
+                CourseInstructor.objects
+                .filter(instructor_id_id=request.user.username, year=working_year, semester_type=semester_type)
+                .values("course_id_id")
+                .distinct()
+                .annotate(course_id_int=Cast("course_id_id", IntegerField()))
+            )
+            courses_query = Courses.objects.filter(
+                id__in=unique_course_ids.values_list("course_id_int", flat=True)
+            )
         
         student_ids_with_programme = None
         if programme_type:
@@ -1961,8 +1965,8 @@ def post(self, request):
                         status=status.HTTP_400_BAD_REQUEST
                     )
 
-            # 8) INSTRUCTOR‐OWNERSHIP CHECK
-            if not CourseInstructor.objects.filter(
+            # 8) INSTRUCTOR‐OWNERSHIP CHECK (acadadmin may submit for any course)
+            if not user_holds_role(request.user, "acadadmin") and not CourseInstructor.objects.filter(
                 course_id_id=course_id,
                 instructor_id_id=request.user.username,
                 year=working_year