def authorized?
    return false if course&.school != current_school

    return true if current_school_admin.present?