1.修护课程作业编辑页面，没权限通过url访问时报错的BUG

2.修复用户可通过url访问课程配置页面的BUG

app/controllers/bids_controller.rb

@@ -832,7 +832,7 @@ class BidsController < ApplicationController
       }
        end
     else
-      render 403
+      render_403
     end
   end
   

app/controllers/courses_controller.rb

@@ -216,10 +216,15 @@ class CoursesController < ApplicationController
   end
 
   def settings
+    if User.current.allowed_to?(:as_teacher,@course)
       @issue_custom_fields = IssueCustomField.sorted.all
       @issue_category ||= IssueCategory.new
       @member ||= @course.members.new
       @trackers = Tracker.sorted.all
+    else
+      render_403
+    end
+
   end
 
   def create