def authorized?
    return false if current_user.blank?

    # Has access to school
    return false unless course&.school == current_school && student.present?