Don't need edit perm to view balloon

judge/views/contests.py

@@ -1191,7 +1191,7 @@ def get_context_data(self, **kwargs):
 
     def dispatch(self, request, *args, **kwargs):
         self.object = self.get_object()
-        if self.can_edit:
+        if request.user.has_perm('judge.contest_rating'):
             return super().dispatch(request, *args, **kwargs)
         else:
             return HttpResponseForbidden()