Skip to content

Fix and review for the hardcoded permission checks in API Routes and UI #1303

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 5 commits into from

Conversation

ferishili
Copy link
Contributor

This PR fixes #1218,

It is at the moment a draft PR as there are some more places left to check.
This PR will be updated and more commits are yet to come.

the canEdit prop is no longer needed since the canUpload prop and associated permission checks in the Perm class already determine whether a user has edit rights.
Instead of removing the bulk action feature for students with upload permissions, we now first check the video list. If the user has either write or owner permissions for any video, the bulk action option will be displayed.
@tgloeggl tgloeggl added this to the 3.29 milestone Apr 8, 2025
@tgloeggl tgloeggl marked this pull request as ready for review April 24, 2025 09:45
Copy link

This pull request has conflicts ☹
Please resolve those so we can review the pull request.
Thanks.

@tgloeggl
Copy link
Member

Rebased and moved to new PR: #1342

@tgloeggl tgloeggl closed this Apr 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Implizite Berechtigungen aller API-Routen und relevanter UI-Stellen prüfen
2 participants