Repository navigation

feat: enforce AuthZ permissions in the Instructor Dashboard API v2 - #39255

Open

BryanttV wants to merge 20 commits into

openedx:masterfrom

eduNEXT:bav/instructor-authz-shared-infra

Open

feat: enforce AuthZ permissions in the Instructor Dashboard API v2#39255
BryanttV wants to merge 20 commits into
openedx:masterfrom
eduNEXT:bav/instructor-authz-shared-infra

Commits on Oct 22, 2026
- chore: temporarily add Instructor Dashboard authz permission constants
  
  BryanttV
  and
  claude
  committed
  9c502f3
- feat: enforce AuthZ permissions in the Instructor Dashboard API v2
  
  BryanttV
  and
  claude
  committed
  4d71fea
- docs: expand the Instructor Dashboard AuthZ migration guide
  
  BryanttV
  and
  claude
  committed
  b4d426e
- test: share the AuthZ flag and policy setup between test mixins
  
  BryanttV
  and
  claude
  committed
  c0f6e46
- fix: align the legacy checks of the Instructor Dashboard AuthZ permissions
  
  BryanttV
  and
  claude
  committed
  8ea80be
- docs: explain the legacy check of the Date Extensions tab
  
  BryanttV
  and
  claude
  committed
  eef7096
- feat: show Instructor Dashboard tabs with any of their AuthZ permissions
  
  BryanttV
  and
  claude
  committed
  998dc29
- test: enable edx-when in the Instructor Dashboard AuthZ tab tests
  
  BryanttV
  and
  claude
  committed
  bdbf834
- revert: drop the AuthZ migration of the Enrollments endpoint
  
  BryanttV
  and
  claude
  committed
  c70f6cc
- feat: show the Instructor dashboard with any of its AuthZ permissions
  
  BryanttV
  and
  claude
  committed
  e1cf351
- test: adapt the non-existent course test to the permission check
  
  BryanttV
  and
  claude
  committed
  4d84445
- revert: keep masquerade on the legacy staff check
  
  BryanttV
  and
  claude
  committed
  2f1cee5
- feat: log the legacy-only fallback of InstructorAuthzPermission
  
  BryanttV
  and
  claude
  committed
  79efda0
- refactor: log the AuthZ decisions at debug level
  
  BryanttV
  and
  claude
  committed
  c524e8f
- refactor: drop the unused forum_admin access from the course tabs
  
  BryanttV
  and
  claude
  committed
  2364150
- refactor: build the legacy dashboard check once
  
  BryanttV
  and
  claude
  committed
  089988a
- refactor: import the shared AuthZ permissions from openedx-authz
  
  BryanttV
  and
  claude
  committed
  7d48414
Commits on Oct 23, 2026
- refactor: address review feedback on naming and docs
  
  BryanttV
  and
  claude
  committed
  c4c4d42
- feat: deny the HTTP methods missing from an authz_permissions mapping
  
  BryanttV
  and
  claude
  committed
  d5a62ef
- refactor: make authz_permissions always a collection
  
  BryanttV
  and
  claude
  committed
  d1fb483

Commits

Commits on Oct 22, 2026

Commits on Oct 23, 2026