You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Wrap Proctored Exams Settings links with courses.manage_pages_and_resources permission #442
Currently, the UI links leading to the Proctored Exams Settings lack the proper permission wrapping. To ensure security and correct access control, all links, buttons, or entry points navigating to the Proctored Exams Settings must be conditionally rendered. They should only be visible and accessible to users who hold the courses.manage_pages_and_resources permission.
Expected Behavior
Any link directing a user to the Proctored Exams Settings is completely hidden from the UI if the active user does not have the courses.manage_pages_and_resources permission. Users who do have this permission should see and interact with the links normally.
Current Behavior
Links to the Proctored Exams Settings are being rendered in the UI without validating if the user holds the courses.manage_pages_and_resources permission, potentially exposing the settings entry point to unauthorized users.
Steps to reproduce
Log in to the system using a user that does not have the courses.manage_pages_and_resources permission. For example, a Course Auditor.
Navigate to the section or page where the link to the Proctored Exams Settings is typically located.
Observe that the link or button is currently visible on the interface despite the lack of permissions.
Log out and log back in with an account that does have the courses.manage_pages_and_resources permission to verify that the link functions correctly for authorized users.
Activity