Skip to content

Task - RBAC AuthZ - Implement new permissions for course creation and outline #38129

@rodmgwgu

Description

@rodmgwgu

Implement new permissions for course list page.

Should live behind the feature flag.

Related permissions:

courses.view_course
courses.create_course
courses.edit_course_content -> Most of this is already handled by the xblock endpoint issue

GET /course/(courseid)/search_reindex/: Reindex course -> Ask product which permission should apply for this

  • POST /course/ -> courses.create_course
  • GET /api/courses/v1/validation/(courseid)/ -> courses.view_course (Also being covered by the checklists issue)
  • GET /api/courses/v1/quality/(courseid/ -> courses.view_course (Also being covered by the checklists issue)
  • GET /api/courses/v1/courses/(courseid)/ -> courses.view_course
  • GET /api/contentstore/v1/course_index/(courseid) -> courses.view_course
  • GET /api/contentstore/v2/downstreams/(courseid)/summary -> courses.view_course
  • GET /api/courses/v1/migrate_legacy_content_blocks/(courseid)/ -> courses.view_course
  • GET /api/content_tagging/v1/object_tag_counts/(courseid)/ -> courses.view_course
  • GET /api/contentstore/v1/course_details/(courseid)/ -> courses.view_course
  • GET /api/contentstore/v1/course_settings/(courseid)/ -> courses.view_course

Reference implementation: https://github.com/openedx/openedx-platform/pull/38009/changes

Metadata

Metadata

Assignees

Labels

verawoodReleased in Verawood

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions