Index: lams_gradebook/src/java/org/lamsfoundation/lams/gradebook/web/controller/GradebookMonitoringController.java
===================================================================
diff -u -rcf4f5ac67d5e9485f04091aeacfb8403d9b71289 -r27f80b66fac8fc5e132f83f6222cc85decdd082c
--- lams_gradebook/src/java/org/lamsfoundation/lams/gradebook/web/controller/GradebookMonitoringController.java	(.../GradebookMonitoringController.java)	(revision cf4f5ac67d5e9485f04091aeacfb8403d9b71289)
+++ lams_gradebook/src/java/org/lamsfoundation/lams/gradebook/web/controller/GradebookMonitoringController.java	(.../GradebookMonitoringController.java)	(revision 27f80b66fac8fc5e132f83f6222cc85decdd082c)
@@ -400,8 +400,7 @@
     public void exportExcelTBLGradebook(HttpServletRequest request, HttpServletResponse response) throws IOException {
 	Integer organisationID = WebUtil.readIntParam(request, AttributeNames.PARAM_ORGANISATION_ID);
 	UserDTO user = getUser();
-	if (!securityService.hasOrgRole(organisationID, user.getUserID(), new String[] { Role.GROUP_MANAGER },
-		"get course TBL gradebook spreadsheet")) {
+	if (!securityService.isGroupMonitor(organisationID, user.getUserID(), "get course TBL gradebook spreadsheet")) {
 	    response.sendError(HttpServletResponse.SC_FORBIDDEN, "User is not a group manager in the organisation");
 	    return;
 	}
@@ -436,8 +435,7 @@
 	Integer organisationID = WebUtil.readIntParam(request, AttributeNames.PARAM_ORGANISATION_ID);
 	UserDTO user = getUser();
 
-	if (!securityService.hasOrgRole(organisationID, user.getUserID(), new String[] { Role.GROUP_MANAGER },
-		"get course gradebook spreadsheet")) {
+	if (!securityService.isGroupMonitor(organisationID, user.getUserID(), "get course gradebook spreadsheet")) {
 	    response.sendError(HttpServletResponse.SC_FORBIDDEN, "User is not a group manager in the organisation");
 	    return;
 	}