Repository navigation
Task - Add the courses.view_advanced_settings permission #328
Description
Description
We want to modify https://github.com/openedx/openedx-platform/blob/ff0690f6c8768158dd07ab6a43e88e8695798283/common/djangoapps/student/auth.py#L183 to allow read access by default when using the new authz system (we don't need an explicit view permission for read).
In #283, we have that if someone doesn't have the manage_advanced_setting permission, they can see advanced_settings but can't edit them (read-only).
Right now, in the code, we are also restricting the view (if they don't have manage, they can't view); we want to fix that.
Acceptance criteria
PR merged that allows reading the advanced settings, and the manage_advanced_settings permission is only used to write actions.
Activity
[-]Fix the manage advanced setting enforcer in edx-platform[/-][+]Task - Change the manage advanced setting enforcer in edx-platform[/+]MaferMazu commentedon Aug 4, 2026
I created this task because in the permissions defined in openedx-authz, we only had manage_advanced_setting. So we expect that, by default, if we are using openedx-authz, we can read the advanced settings. - In the code, currently we are expecting a specific read. <- If we want to maintain only the manage_advanced_setting, we should in some way allow the read by default if we are using openedx-authz.
Designs by permission: #283 (comment)
Edx-platform enforcement point: https://github.com/openedx/openedx-platform/blob/ff0690f6c8768158dd07ab6a43e88e8695798283/common/djangoapps/student/auth.py#L183
cc @BryanttV
MaferMazu commentedon Aug 4, 2026
But after reading again: https://docs.openedx.org/projects/openedx-authz/en/latest/concepts/core_roles_and_permissions/course_roles.html#advanced-certificates, maybe we should hide it if someone doesn't have manage_advanced_setting; if so, we can discard this issue.
cc @gviedma-aulasneo @BryanttV
BryanttV commentedon Aug 4, 2026
This was validated with @gviedma-aulasneo, and it was decided to create a new permission (
courses.view_advanced_settings).This requires changes in:
6 remaining items
BryanttV commentedon Aug 18, 2026
openedx-authzPR merged!Pending changes in
openedx-platformandfrontend-app-admin-console[-]Task - Change the manage advanced setting enforcer in edx-platform[/-][+]Task - Add the `courses.view_advanced_settings` permission[/+]courses.view_advanced_settingspermission in openedx-authz #391courses.view_advanced_settingsenforcement in openedx-platform #392feat: add view permissions for advanced settings, certificates, group…