Index: lams_learning/src/java/org/lamsfoundation/lams/learning/web/controller/LearnerController.java
===================================================================
diff -u -rbd4fa408454e7389b4e60bc68f2488de88eff663 -r3beab6f893ac30158c537ee978af65f7d3df5129
--- lams_learning/src/java/org/lamsfoundation/lams/learning/web/controller/LearnerController.java	(.../LearnerController.java)	(revision bd4fa408454e7389b4e60bc68f2488de88eff663)
+++ lams_learning/src/java/org/lamsfoundation/lams/learning/web/controller/LearnerController.java	(.../LearnerController.java)	(revision 3beab6f893ac30158c537ee978af65f7d3df5129)
@@ -205,6 +205,10 @@
 	    throws IOException, ServletException {
 	// fetch necessary parameters
 	long lessonID = WebUtil.readLongParam(request, AttributeNames.PARAM_LESSON_ID);
+	Lesson lesson = lessonService.getLesson(lessonID);
+	if (!lesson.getAllowLearnerRestart()) {
+	    throw new ServletException("Lesson with ID " + lessonID + " does not allow learners to restart it.");
+	}
 	Integer userID = LearningWebUtil.getUserId();
 	User user = userManagementService.getUserById(userID);