Repository navigation

feat: enforce AuthZ permissions in the Cohorts tab endpoints - #328

Draft

efortish wants to merge 21 commits into

bav/instructor-authz-shared-infrafrom

ks/issue-492-cohorts-authz

Draft

feat: enforce AuthZ permissions in the Cohorts tab endpoints#328
efortish wants to merge 21 commits into
bav/instructor-authz-shared-infrafrom
ks/issue-492-cohorts-authz

Commits on Oct 22, 2026
- chore: temporarily add Instructor Dashboard authz permission constants
  
  BryanttV
  and
  claude
  committed
  9c502f3
- feat: enforce AuthZ permissions in the Instructor Dashboard API v2
  
  BryanttV
  and
  claude
  committed
  4d71fea
- docs: expand the Instructor Dashboard AuthZ migration guide
  
  BryanttV
  and
  claude
  committed
  b4d426e
- test: share the AuthZ flag and policy setup between test mixins
  
  BryanttV
  and
  claude
  committed
  c0f6e46
- fix: align the legacy checks of the Instructor Dashboard AuthZ permissions
  
  BryanttV
  and
  claude
  committed
  8ea80be
- docs: explain the legacy check of the Date Extensions tab
  
  BryanttV
  and
  claude
  committed
  eef7096
- feat: show Instructor Dashboard tabs with any of their AuthZ permissions
  
  BryanttV
  and
  claude
  committed
  998dc29
- test: enable edx-when in the Instructor Dashboard AuthZ tab tests
  
  BryanttV
  and
  claude
  committed
  bdbf834
- revert: drop the AuthZ migration of the Enrollments endpoint
  
  BryanttV
  and
  claude
  committed
  c70f6cc
- feat: show the Instructor dashboard with any of its AuthZ permissions
  
  BryanttV
  and
  claude
  committed
  e1cf351
- test: adapt the non-existent course test to the permission check
  
  BryanttV
  and
  claude
  committed
  4d84445
- revert: keep masquerade on the legacy staff check
  
  BryanttV
  and
  claude
  committed
  2f1cee5
- feat: log the legacy-only fallback of InstructorAuthzPermission
  
  BryanttV
  and
  claude
  committed
  79efda0
- refactor: log the AuthZ decisions at debug level
  
  BryanttV
  and
  claude
  committed
  c524e8f
- refactor: drop the unused forum_admin access from the course tabs
  
  BryanttV
  and
  claude
  committed
  2364150
- refactor: build the legacy dashboard check once
  
  BryanttV
  and
  claude
  committed
  089988a
- refactor: import the shared AuthZ permissions from openedx-authz
  
  BryanttV
  and
  claude
  committed
  7d48414
Commits on Oct 23, 2026
- refactor: address review feedback on naming and docs
  
  BryanttV
  and
  claude
  committed
  c4c4d42
- feat: deny the HTTP methods missing from an authz_permissions mapping
  
  BryanttV
  and
  claude
  committed
  d5a62ef
- refactor: make authz_permissions always a collection
  
  BryanttV
  and
  claude
  committed
  d1fb483
Commits on Oct 24, 2026
- feat: enforce AuthZ permissions in the Cohorts tab endpoints
  efortish
  committed
  3d61f4f

Commits

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 24, 2026