diff --git a/src/Foundation/Authorization.hs b/src/Foundation/Authorization.hs
index 0997791f4..9b7b211bd 100644
--- a/src/Foundation/Authorization.hs
+++ b/src/Foundation/Authorization.hs
@@ -1196,6 +1196,10 @@ tagAccessPredicate AuthEmpty = APDB $ \mAuthId route _ -> case route of
     hasExternalExams <- $cachedHereBinary authId . lift . E.selectExists . E.from $ \(eexam `E.InnerJoin` eexamStaff) -> do
       E.on $ eexam E.^. ExternalExamId E.==. eexamStaff E.^. ExternalExamStaffExam
       E.where_ $ eexamStaff E.^. ExternalExamStaffUser E.==. E.val authId
+        E.||. E.exists (E.from $ \externalExamResult ->
+            E.where_ $ externalExamResult E.^. ExternalExamResultExam E.==. eexam E.^. ExternalExamId
+                 E.&&. externalExamResult E.^. ExternalExamResultUser E.==. E.val authId
+          )
     guardMExceptT (not hasExternalExams) $ unauthorizedI MsgUnauthorizedExternalExamListNotEmpty
     return Authorized
   CourseR tid ssh csh _ -> maybeT (unauthorizedI MsgCourseNotEmpty) $ do