Function check_exam_permission 

pub(crate) async fn check_exam_permission(
    conn: &mut PgConnection,
    roles: &[Role],
    action: Action,
    exam_id: Uuid,
) -> AuthorizationResult<bool>

Also checks organization role which is valid for exams.