Adding api_not_allowed

main/work/download.php

@@ -93,5 +93,7 @@ if (!empty($course_info['real_id'])) {
             api_not_allowed();
         }
     }
+} else {
+    api_not_allowed();
 }
 exit;

main/work/view.php

@@ -41,6 +41,8 @@ if (user_is_author($id) || $course_info['show_score'] == 0 && $work['active'] ==
         $tpl->assign('content', $content);
         $tpl->display_one_col_template();
     } else {
-        api_not_allowed();
+        api_not_allowed(true);
     }
+} else {
+    api_not_allowed(true);
 }