Index: lams_central/src/java/org/lamsfoundation/lams/web/LessonOrderServlet.java
===================================================================
diff -u -re99f2a23689fd7b7311fedb74b6d2c475d402cc4 -ra84f7b5f49832aa06c2f46539370e6753e75a78e
--- lams_central/src/java/org/lamsfoundation/lams/web/LessonOrderServlet.java	(.../LessonOrderServlet.java)	(revision e99f2a23689fd7b7311fedb74b6d2c475d402cc4)
+++ lams_central/src/java/org/lamsfoundation/lams/web/LessonOrderServlet.java	(.../LessonOrderServlet.java)	(revision a84f7b5f49832aa06c2f46539370e6753e75a78e)
@@ -81,6 +81,7 @@
 					roles.add(roleId);
 					if (roleId.equals(Role.ROLE_GROUP_MANAGER) || roleId.equals(Role.ROLE_MONITOR)) {
 						allowSorting = true;
+						break;
 					}
 				}
 				if (!allowSorting) {
@@ -97,7 +98,7 @@
 						Long l = new Long(Long.parseLong(id));
 						if (!contains(lessons, l)) {
 							log.warn("Lesson with id " + l + " doesn't belong in org with id " + orgId);
-							response.sendError(HttpServletResponse.SC_FORBIDDEN);
+							response.sendError(HttpServletResponse.SC_BAD_REQUEST);
 							return;
 						}
 					} catch(NumberFormatException e) {